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A. 



The Information presented In this paper Is based solely 
on a study of relevant documents issued by the Arraetf Forces 
Security Afsency f AFSA-lIjJ In their TIOOH Document Polder (DP) 
Series. Tho great majority of these document a or* translations 
»ona the tternun of material portainln* to signals domnunloations 
which the Target Intelligence CoOTdttee (TICOK) was able to 
salvage as crypto lo-Ic targets in German and Gemn oco ™* 
territories on the continent of Europe we*<o overrun by th# 
advancing Western Anile a in 






A * . r * m M — - addition to the discoveries 

of important Axis cryptolo^lc caches , the interrogations of Axis 
oryptolojfic experts and the 





■ u . - _ . written by aoise of there in 

the postwar era concernim; their war ti pie activities have added to 
amount or mluabl© documentary material* 

B. BoH*a*Work of Former German Cryptolo^ie Experts 



1 



ortajiec of These ttsn 



Of the treatises 
written by the following 
most useful source a of 




written in the postwar 
cryptolopjlc experts werq 
information on Russian 




f tho a a 

found to be 
Cryptolo^y: 



of the 




Alex 
Signal 






anil, the former chief of the Russian Section 
nee Agency of the German Army High Command 




Kurt Frieda ri 
the Gentian Army Signal 





? a linguist and eryp tana 1 yet with 
el licence it erg limit (KONA 6J* 




Adolf Pasehke* the last head of the 

Section (Per 3 23)* 



German Foreign Office 



WilholiD Fanner, the forraer 
Signal tntelliganco Af^ney of tho 
Foroea 






ef of cryptanalyaia of 
Corrraand Crejman Arrned 






Wllhelm Pllcfce, 

designated historian of the Signal 
Command German Armed Forces (okw/Cfrl)* 




©valuator and the officially 
nee Agency of the Supremo 




These 
In be 111 ^ence 
epaak with 



2 







were 
s and 
on tho 



fiffures In the various German 
is no question but that they 
subject* 





» Reliabilit 



Their Evidence 



A general agreement rerardIn/5 the details of many Russian 
ie evident In those treat lea a, Only In a few instance g may 
discrepancies be found. The information on the whole seems to be 





there Is little reason to question the sincerity of 
th-ae men* While these sources of information are oft on not eta 



extensive and detailed as one ml*ht wish. It must be reraembered 



that these German nationals prepared their ho^ne^work from memory 
without benefit of extensive files which had long since been lost 



or destroyed. Of course In many instances, the descriptions are 
substantiated by captured doouiflonta which were obviously written 
before the Cennan capitulation? 

G * The Croat Crypt; an p. lytic Effort of the fkirraana Against Russia 

1* The Continuity of E ffort 

That the German eryptanalytic effort against Russian 
military communications was very great Is quite clear from even 
a cursory examination of these sources. And their undoubted 
successes In this field was due* accord! A"! to Alex Dettmannj 
primarily to the fact that systematic observation of Russian 
military and political radio traffic and the cryp tana lysis of 
it was be/*un early a Khile Dottmnn certainly was not th&re at 




the beginning of the organization of German ersptolo^ya. there 
available one source * namely Wllhelm Penner * vho was 

, therefore f in a position to give a detailed history of 
the skeleton forerunner of OlW/Chi and its connections with the 





other branches of the German Intelligence Service* When G&vtnnny 
apsed In the fall of I918 the Office of the Chief of the 





Service was die -solved and of course all cryptoloftlc work 
was supposed to be discontinued* However, Feimer states that 



he and one other man* Peter ITovcpaaeftsrmyp a former Imp e rial 
Russian Naval Captain, supposedly a director of the Csariat 




cryp tana lytic service against the German Baltic Fleet 
during the first World War, be^an in the autiaim of 
cryptanalyeis of the telegrams to and from the Russian H 







Attache In Berlin. Thus did the Germans be^in the rebuilding 
of their Cryptologlc Agencies and such was the success that 
"■Chi 11 Itself (there were five other major Gernar: cryptologlc 
agencies) In 1945 boasted that it had an Invisible! seat In the 
cabinets of more than 30 foreign Roverronents, monitored currently 
some 300 cryptographic systems and read about 1?5 In 28 different 
lanj^uasea* 

The development of Ruse lan cryptography shows how 
Important It la to start docryptment of the cryptograms of a 
country whenever possible at a point where the cryptography of 
the country in question Is still primitive. It is then necessary 
under all circumstances to continue observations of the traffic 



without breaks even for a brief period since otherwise ones own 
signal Intelligence finds it difficult or even iB^ossible to 
keep step with developments* The Germans did preserve such a 
continuity of effort against the Russians and as a matter of 
fact fehoir continuity in this case was not even broken by the 
events of 1910* since Adolf Paschke says he was summoned in 1919 
to the German Foreign Office as an expert in cryp 

experience in crypt analytic work with the Signal Service 
during the war igilf -19, and that during the year:; 1919 - 20 he 
did work through all the crypto-»raphic naterial of the Claris t 
Foreign Ministry which had b^en preserved and mack available to 






him 



3* The Successes 



Mention of the fol lowing German cryptanalytic successes 
against the Russians during If or Id War II is made in Volume I of 
the.TICGM history produced at AFSA entitled "European Axle 

r II as revealed by "TICOH™ Investigations 

- S - 









TriP fiPrRFT lrsTJF5TII 





by Other Prisoner of War Interrogations and Captured Material, 

**pall'- Gorman": 



a. The Signal Intelligence Ar^ney of the Array Hi^h 
Cotumand (OKH/Gd HA) established Russian 









ation of strategic reserves from early in the war through 
*• This was aceoioplishccf through traffic analysis and crypt 
analysis of Hussion 2, 3, h and 5 figure codes (both Army and 




Peoples C Oiimi s a ar 5 r, t J 



b* The Signal Intelligence Agency of the Air Pore© High 
Qcmmand (OKL/fiB Abt 350} by cryptanalysis of Russian Air Pores 





to-ground 2-figure, 3-fi^ure^ and (|- figure administrative 
operational codes, and some $-fi t r*ure codes, provided a conqslete 
°™r of battle for the Hue si an Air Forces from 1937 until the end 
of the war. Proa partial decipheria&nt of air-around traf f ie^ front 
plane -to-ground radio-telephone monitoring, and from radio-direction 



finding of bombers when airborne, this agency was able to givo 




warnings of all Hussion long-range strategic bombing raids. 
Also from crrotanalysis of each Russian Air Array's 2-fiture, 3- 
figuro, and figure traffic, from traffic analysis, fron pi ana- to- 
plane radio- telephone monitoring, and from radio direction-finding 
of planes in flight, it was able to warn German ground forces and 





or squadrons of imponding op orations by Russian fighters and 
— bombers. 



Interrogation of Japanese -JryPLtologio Personnel 




!• Difficulties in Obtaining Informati on 

In addition to the German sources of information there 
must be mentioned the Czct that 6ue to the eminent buccoss or 



TI30M operation* In the European Jhe&tre of Operations* similar 
measures were taken for the exploitation of Japan© so cryptoloplc 
targets. Pop various reasons , chief of which were the diploma tie 
nature of the surrender and the delayed occupation* TIC OH activities 
in the Pacific Theatre did not met with a sisnllar success* 




Japanese authorities in the \ Void of Signal Intelligence, having 
r^ covered from the initial nurabing imp suet of the surrender t wejre 
able to destroy Eiueh which ml^t have been of Importance and to 






their subordinates regarding the extent to which they 
cooperate with the Investigating parties and the amount of 



tion tc bo revealed. It was found, however * that the 
Japanese did achieve eoirse degree of guccgss In the cryptanalysis 



of Rue si 




2* Reliability of this Evidence 




A Study of the translation© of the 






6 



O 

a 



of the Japanese so far issued in the DF series gives the lipresslon 
that this source of Information Is rather vague and clouded as 
rGF?ar^3 the treatment of Russian cryptoloRy* There is certainly j $ > 

not the sincerity and a trai^t forwardness of thought that is evident fc 
In the Geman material on this subject* This source seexas to add 1 b 

little to the Information on Russian crypto logy obtained from the I > 

GeL-man fnaterial, and this is to be perhaps more or less expected, 5 
elnce it is estimated that the six main cryptolocle organisations o 
possessed by Germany during ! T oi>ld War II had a total strength 
including field units and overhead of approximately 30*000 
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15* Evaluation or the Evidence 

1* Inooigpleto Cove are rte_ 

While it Is evident from the above outline of the sources 
or Information that much ray be 1 earned regarding Russian Gryptologyj 
especially so from captured German documents end Interrogations of 
forni&r Gorman signal Intelligence! experts* it nust be emphasised 
that since all the TIC OH material in repository at C-overrunenfe Com- 
munications Headquarters ( GCHQ) and Artie d Fores s Security Agency 
( 6FSA ) ha a not yet been processed (1951) and since the total of 
processed material from AFSA on file at CB represents only a small 
percentage of that issued p it is quite possible that the results 
of this survey MHht be augmented end some details revised if a 
more coinplete eaaaxiilnation were possible. Only translations of 
TICOH documents issued in the DF series have been examined; other 
TICOM documents* such as those issued in the D (Document) series 
and I (Interrogation) series may throw further light on the subject. 

2* Cri tor la_fo_r__ e_yalna tion 

■ 

Details of the organisation of the Russian Communications 
Security Organization and descriptions of the cryptographic s yet eras 
used together with the areas, authorities, and dates of issue and 
recall are here summarised from ths doomnentary raatorial that is 
available. A couple to listing by DP number and title of all the 
documents studied will be found in Appendix A. 

The foil wing criteria for evaluation will be followed 
in this papers 



a* Captured documents 
reliable* 



are considered the mors 



b* Tft£ German intoirorotfttion 
over the Japanese* 




preference 



c 



In the case of 
after capitulation 

BottsnaLim is t&kon 

he waj no t only 
specialising in 
but also had a oox 
in this field for 




e on sports written 
the version of Alex 







ve all others Inasmuch 
the chief of a department 
on of Russian systeiae 
ty of successful effort 



ovejr tea ysars. 



3. The Period of Validit y 




The period of validity fo* 1 the statements roade in this 
paper will cover roughly the period 1935 to V)h$* unless otherwise 
specifically stated. It was during thia period that the Gercnans 

are our main sources of Infowoation, made their great crypt- 
*c effort and achieved many successes in reading the ciphered 
co:imjuni cations of the hisslana* It should be noted that we have 
here retained the Russian nomenclature as interpreted by the Germans 
during that period* Thus 3 for exai)iple tf the terra EKVD (Peoples 
G orami a sari a t for Internal Affairs) is no longer current* the equlv* 

organisation now being called KTO (Ministry of Internal Affairs 
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II. C ROrAHIZATIOIf OF CRYPTO LOGY IK THE RED 'JOREER AID PEASANT AKTI 



mm ^ f 



A* The Various Sections of the Red Army l^w^d In Cr 





Hi© highest agency for eryptolo ;y in the Army and Air 
Force of the TJ.S.S.H., both for ComniunlGations Security and 
Corrnmini cations Into 111 gone e as veil as for the related technical 







fields, is tha 6th Section of tha General Staff of the RKKA (Red 

"in Itosoow. Directly subordinated to 
it axo all Btji Sections of the front staffs, armies, and corps, 
and all 6th flections of divisions anc brigades as well as the 
SKO (cipher sections) of the lower echelons* After July 
tlr; deal '"^nations or tl - c ?■ _rp to graphic sections of armies and co.vos 
seem to have been changed to 6th Sections, 

B. The Authorized Strengths 






Pron numerous p/lf Interrogations of Russian cryptographic 
officers, the Gennans reported the authorized strengths for 
orjptOfp?aphic sections in 191+3 as follows: 

General Staff 8th Section Cryptor^raphlc Group ij.00 men 
Front Staff 3th Section Cryptographic Section 65 men 

Chief has rank of Colonel. 
Army Staff 6th Section 20 to 22 nan Chief has rank of Lt. Colonel. 

Corps Staff oth Section 10 man Chief bus rank of tin jo** 

Division Staff 6th Section 5 to 6 rcen Chief has rank of Captain. 

Brigades and other units subordinate to a division down to battalion 






a crypto graphic; officer assi^ed to the responsible s 
"Assistant to the Chief of Staff for Special Communications 1 '* 

C. The 6th Section o f the G en eral St aff in Moscow 

a. 

1* The subdivisions 





The 8th Section of the Gene 1 1 Staff of the RKKA in 
-,_scow Is said to be subdivided according to Its duties into three 
groups, each of which a sauries a number o± functional 

Group I* 




1* Administration and personnel, 

2* Developras nt and current Inqproveroent 

of cryptographic systems. 
3» Introduction and die ^rlbution of 

Cryptographic materials, 
'.La He^ietration or all encrypted messages 
in operational and tactical ays tens* 



Group II* Crro tonal 



1, Crjptanalysis of foreign cryp to nfraphic 
system* 

2* Commitment and organisation of radio 
reconnaisance^ 

* Evaluation u 

* Archives for eaptux*ed doeuiasnts* 




07 > 




o 

> 



0 



Group III* Technica l 




1* Develop iGnt of cipher inachlnas 

fee a ting of proposals In this 
field* 

2* Development of mechanical aids, 
possibly ervptan&lytie 




may also be concern© d with the 

ne rat ion of infinite digit sequence a 
be distributed In the font of 
"Bloktiota 19 (one time additive pads)* 




2* The Fun ctions of the C 





Croup I or the Cryptographic Group la for all practical 
s* the administration of the 6th Section, In close contact 
with the NKVB (Peoples Cottmisaariat fcr Internal Affairs) it is 
r3 sponsible for selection and maintenance of cryptographic personnel* 
It sotg up training courses and die tributes the trained men according 



to needs* 



The preparation and distribution of new crypt oxyaphia 
a ns well as the withdrawl of those to be replaced was 



exclusively the duty of Troup I of the 8th Section of the General 





of ttKKA in Ilea cow till March 19l|2* In this way a unified 
direction and control was possible and the issue of only a few 
General systems had the advantage that these were *iell nasi ere d by 
the cryptographic personnel and that errors in encryption t could 
ne rally bo avoided* It is obvious that this type of unified 
reetion was also of groat advantar^ for German crjpt analysis because 
a concentration of homogeneous traffic inade possible a break into 
Russian systems and the relatively Ion* period of use of the single 
sjsmel made possible the expansion of these breaks by tfcafJemansV 




3» The Control of zn o Peoples Consul s saris t for Internal Affairs 



— — — r, 







exercised an overall control in the 
G^spilation and distribution of cryptographic materials and 



urve 








1 




proven from a Russian document » "Regulations for Staff Crypt ographl 
Service in the Red Array* (Dp 95)* The docunant cap tared by TICOM 

the German translation of the Rues 3 an ro^ulatlona published bv 







the General Staff of the Red Arisy Hoscow* -l-^o 
The following excerpts fron this docunant shoule be aa £\r'lc: 

9« n Thm entire work of the staff cryptographic 

units in the Hed Army is directed by the 
chief of the war coronsisear of the Red Army 
"~" " the 8th Section of the General Staff 





In their technical (special) activities the 




crjptor^aphic units are guided by 
instructions of the 7th Section of the Main - § 

Administration of State Security of the 
Peoples Corainlssariat for Internal Affairs 
of the ooviet Tin ion (SUGfi I5KVD S3B). rt 




23* "Cipher a s their consonant parts , the 

Instructions for their use, ai*a compiled* 
put into fore* t and declared invalids In 






□ 




*4 O 




Army only by the General Staff of \& 
the Red Army through the 8th Section of 
the General Staff, Every cipher must be 
worked out in agreement with the 7th 

- 9 - 
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SeetiOn^of the Main Adiainistration of State Security 

Consul g sariat for Internal Affairs for 
the Soviet Union** 

4* A_striot Selection of Personnel 




the selection of cojetiutjI cat ions personnel* in 
particular those dealing with cryptographic material, extra* 
ordinary strict standards war® ttplied until the beginning 
of 19lj2* All those engaged In the 8th Section or Its subord- 

t even down to the last "SnO 11 co-worker 







smallest unit had to bo old party members and absolutely 
reliable in their political attitude* In the final analysis* 
"~ * * the selection of this personnel wac co o tely under 




the control of the UKVD 



4 




aOi the two special schools for cryptographic 
personnel in Moscow and in Tambov wore conducted by the KIOTO* 
ltefoi»e the war and down to ea^ly 19lf2 the period of training 
at the ^e schools was alx months* Besides training in the 




of the most varied cryptographic systems, there was 
taunht in condensed form the history of cryp fco.^raphy and the 
field of cr:/ptanalygls was touched upon brief! }* However* it 
is certain that no decryption of any type of forolr^n crypto- 
gram* was taufjEat or practised at the^e achoole and that 






me of crypt analysis t^ras only intended to demonstrate 
to the pupils that such a thing existed and to train and inspire 
them to precise j responsible uee of cryptoirraphlc material ■ On 
completion of this training course for the perfection of officers 
o.r the staff cryptographic service (K>.KS) an exaijlnation t»ac 






* The_ General Ro optimisation of 1 

The RKKA as a whole underwent a speedy reorganisation 
d\iriiu* the first winter (19kl~k2) of the war with Germany. All 
treasures which up till then had jivon the war on the Rug&ian side 
a Coriiaimiat-Intorrmtlonal character were very cleverly charged 
aid Hie war Ms declared a campaign for tho j?rseing of the Father* 





™ ths Patriotic War with the German Fascist Aggressors* Ttm 
hae a system of political guidance and leadership reaching 



frdni the General Staff of the RKKA demn to coinpa-ny platoons* In 

to the official representatives of thQ IJKVD there are 





secret agents from the ranks of the Had Army working under them, 
wiioso tank It is to r+cogniES aaa. report In their initial Stages 
my novermnts hftStila to Soviet in Arras t arid mini absent lie 
in the hands of courts aartial conducted by fcho H!TVD* In the 




on the political coftird sears who up till then had to 
every order of the commanders and exorcised an often 
fateful influence on the morale of the troops, disappeared officially 
nevertheless an invisible political surveillance by the 
continued* unreliable co-rmanders ver$ transferred and thus clis 





cared more or leas without attracting attention* 

6* The Decentralisation of Production of Cryptographic 5 




The rapid German advance during the sumsBer and autumn 
of 191*1 with groat encirclement battles and unforseen flank and 
plncer movement a inevitably resulted in time German capture of 
numerous Soviet cryptographic do summits of the Array and Air Force* 
Since when they were used universally the capture of a single copy 
was sufficient to compromise the system of the entire front § it 



was obvious that the Scviot Supreri© Command had to make a 




as quictely as possible* This basic chanr?e in the organization 
of the cryptographic service in a period which was exceedingly 



critical for the USSR was put through In the notably brief period 
of three months, using thrust a of the severe at penalties for any 

delays or contraventions, and by the expiration of the month of 

was every where completed* In contract to the 





centralization of peacetime, the production and distribution of 
cryptographic material was no* decentralized. Group I of the 




Section of the General staff of RKKA in Moscow remained 
responsible only for the issue, recall and replacement of the 
operational S-flgure code (Chiffre) arid had to provide current 



means of reenclpheraient (additive sequence) for this cryptographic 
system. All radio massages In this nost Important Russian 
system were sent In the original, after they had fulfilled their 
Immediate purpose, to Group I of the flth Section and were here 



sorted and filed from the point of view of military history* 

were intended to form the baa Is for a subsequent general 




staff study 

With the decentralization* all cryptographic systems 
used at the front = called since then SUV r (camouflaged communica- 
tions of the Command) - were worked out by the Signal officers 
of the Immediately superior units, were issued at their discretion 
and were likewise replaced whan there was danger of compromise, 
systems thua originated were distributed to the subordinate 







unite and to the neighbouring organization - from left 

setting up and working out of SUV systems by the 
tial Signal Chiefs a scheme was worked out by the 
Section of the General Staff in Moscow which outlined in a 








way the slaje and type of atich cryptographic systems 
but contained no directive regarding the choice of the 




ernfint 



According to Alex Dettmann it is solely due to this 
ohanga In the organization of the cryptographic service that 
the readability of Russian army messages became much leas and 



that the capture by the Germans of such cryptographic system© 
no longer represented a danger to the entire front* The 





Icity of these systems t the relatively slight amount of 
traffic on the individual net and the short period of use 
analysis extremely difficult and often ma de the work on very 
" groups of messages an Impossibility, If In spite of this 




It was possible for the Germans ri^jht down to the final days 
of the war to provide their High Command with important 
in formation P often when their own comunlcations system was 
having great trouble, that was due exclusively to the fact that 





the former German Army had plenty cf trained and experienced 
cryptanalytic personnel. 



7* j?h^ Kaduction In Training Time for Personnel 



- 



The heavy losses suffered by the Russians In the 





-■ 



summer and autumn of 19q-l w«ls also felt among their cryptographic 
personnel* It became nocessary to change the requirements w > 

regarding selection and to reduce the period of training at I ^ c 

the special schools for cryptographic personnel* The Russian 1 *3 

with his Ingrained tendency to allow only the smallest possible 
number of people any Insight Into se^rev. matters had not baen 
able to make provision for the loss of trained people and 
provide trained replacements at once; he was therefore obliged 
to give up an all too strict and thorough selection of 

personnel* Since 19^-3 non»membera of the communist 
party could be employed as cryptographers, if they were otherwise 

ndabla* The period of training which was first reduced to 
three month a was again reduced and since 19lf3 was only one month. 
As a result of the heavy losses, the personnel strength of all 
the 8th and 6th Sections had to be sharply reduced and the heavy 
losses of officer* in particular resulted In the employment of 



■Til 






1 



civilian officials as directors of the 6th Sections with 
brigades and divisions. 

As a consequence of the cute in personnel and training 
time which occurred in various parts of the Signal Service in 
19f|2 t the performance and re liability of radio operators *md 
cryptographic clerks suffer ad* tfore srrora occurred in encrypted 
me a sag es and frequent requests for repetitions or for change a 
of key were noticed by the Germane on many Russian links* This 
fact ie doubt lea a one of Idle reasons for the rapid extension 
of Baudot lines in Internal communications since In thla way 
it was possible to spare comiminl cat ions personnel in the 
interior for service at the front* v-hsther in addition to 
Baudot , cipher teleprinters, speech scrambling machines, or 
purt cipher machines were also put into uue on internal circuits 
is not quit* certain. However it seems definite that traffic in 
machine systems had not appeared on military circuits up to 
May 19*5* • Dattmann is of the opinion that the Russian prefers 
manual methods of tmcryptmetttj all the more so since he has 
found In the use of the one-time additive the ideal method of 
r e- en c I pher me n t « 

fj* Security Measures 

Interesting and Illuminating aa regards the importance 
of secrecy In the Russian Cryptographic Service Is the fact that 
the sections working with ciphers at the individual staff could 
only be entered by the Colander, hi a deputy, and the highest 
political functionary (NXVD), and that t aside from the Section 
Chief of tiie moment, only these had the right to check the work 
of the Individual cipher clerks. The cipher clerk, however. Kits 
only permitted to take orders from hi a immediate superior, 
i.e. the chief of the section concerned. Since the chief of the 
cipher section, at least In the first year of the war was an 
old party member and thus very often closer to the political 
functionary of the unit than the commander , there were often 
disagree able conflicts which might ultimately lead to an 
absolute split between the political an:] military leadership. 
In any case down to the middle of 19I12 It was practically 
Impossible for the Commander to send a report by radio without 
the knowledge and counter signature of the Commissar' ifhather to 
a superior office or only to subordinate formations. This 
untenable situation came to an end with the basic changes in the 
course of 19^2. The competences of the political leadership 
were clipped in harmony with the proclamation of the war as a 
Fatherland crusade and the contmandera now obtained the right 
to make their decisions themselves * Practically, however, 
everything remained the same, since the Commissar still had the 
right to read all messages and could, If he chose, use these 
as proof against the military leadership* 

That the NKVD was ever present in the Russian 
Crypto (graphic Service is seen from the following references 
to security to be found In the above mentioned manual, 
"Regulations for Staff CryptocsrapMc Service in the Red Army"* 

Para k 5* "The destruction of crypto graphic 1 3 suss which 

have been declared invalid is carried out by the 
cryptographic nnlts of districts and army staffs 

on the basis of Instructions J^rom the 8th Section 
of the General Staff of ohc Hed Army. Destruction 
is in accord with instructions given in Section 
lll|. of theee regulations but onl, in the presence 
of a representative of the 7th Section of the GUGB 
NKVD SSSH (7th Section of the tTNKVD)*" 
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Para 123. 



•'If any breach of these regulation* or any absence 
of basic documents is disclosed* the chief of the 

staff cryptographic unit in spec tad is obligated 
to take staps immediately to eliminate such 
broaches and al no to so arch for lost documental 
At the same time a report £ a to be made to the 

cryptographic unit of the next higher staff* to 
the 8th Section of the General fSt&rf of the 
Red Army and to the local organ of the fTKVD** 

In connect ion with security measures it la Inter eating 
as early 1939 the Ku as lens wore aware of the fact 
radio la not the most secure Deans of communication and 
that the use of l&^d lines whenever possible was ordered* 

manual : 



to note that 





aguin from the above 



Para 27* 



11 




9 



c are Intended exclusively for the 
transmission of strictly secret and secret 

aae usages of an urgent nature- The transmission 
of enciphered messages by radio is only 
permissible in exceptional cases* l.e* in default 
of wire connections* whereby the special 
instructions of the General Staff of the Red 
Army are to be followed* 11 

Difficult lea In Subdividing the Functions of the 8th 
Section of the~&eners.i staff 



The organization end functions of the Cryptographic 
Oroup (Group I) of the 8th Section of the General Staff of the 
JtKKA in Moscow have been covered in some detail and the overall 



control of the NKVQ* visible 
seems beyond question. 



or otherwise* in these matters 

there ia general agreement as 
regards the function a of Group I there seems to be some doubt 





concerning those of Group II 
(Technical)* Alex Dettiirannj 
Section of OKB/Gd MA points out that the 

Section of the General Staff 



(Crypt analytic) and Group III 
former chief of the Russian 

8th 





structure of the 
in Moscow and its functions could 
not be the subject of enciphered ooimmanl cations and that 

ge regarding it must be secured from other source* « 
tttftnn* maternally of Russian stock and an expert in the 
language* cl alios to have personally conducted many of the 

one of prisoners and deserters suspected of having 
had official connection with these mat tors* He la quite definite 
In the statement that the 8th Section of the General Staff had 
a group engaged in the crypt analysis of enciphered enemy reports* 
(DP 112 and 19*>)* This was also undoubtedly the official 




opinion 
High Command as 

agency dated to 
discordant note 





(DP 




f z ;ure in 

9) 



in the Signal Intelligence Agency of the Ge ns^an Army 

expressed in a captured document from that 
iqk3* UFSA-1I4 Serial 5A9K However* ono 
is found in the report of an interrogation 

conducted by Sergius Samsonow (the deputy of Dottmann and also 

German Army Signal Intelligence) in 19i|lt.* 
The Russian prisoner who was evidently especially 

SamsonoTj, was a former chief instructor in the 
Cryptographic School at Tf rbov. In the translation of this 
German report there is found the folio wings 

"Grypt analysts find cryptographic security study is 
not carried on within the Red Army. Sections concerned with 
such duties ire assigned neither to the General Staff nor to 

subordinate staffs* The 







interception of enemy radio traffic 
ia controlled without exception by the 5th Section of the SKVP 
in tescow. This 5th Section of tho HKVD Is the only organization 
that la concerned with crypt analysis and security studios. 
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knows nothing further on this organization or the nature and 
results of Ita operations. The Introduction of a new coda or a 
new system by the 8th Section of the General Staff is carried 



out in all cages only with the approval of the 5th Section of 
the NKVDp where the "security* of the proposed ay a tan is tested 

haa oft^n bean discussion that the control of the 





faction of the General Staff lies in the hands of the chief of 

5th Section of the NKVD. Within the army there la ac, 
only work with direction finding and the Interpretation of 





on amy call siftn;* 




Note that the control exercised by the NKVD orer 
introduction of new cryptographic systems was reported in the 
Mxcerpta from "Regulations for Staff Cryptographic Service In 
the Red Army 1 * (1939) as being not In the 5th but In the 7th 
Section of the Main Administration of State Security of the 
Peoples Commissariat for Internal Affairs oX the Soviet Union 

(GUOB KKVD $£SR) s 

Furthermore It may be safely assumed that the 

conclusions expressed in the translation of the captured document 

(AFSA-14 Serial 5A9/ *©i*e the result of the sifting of many such 

Interrogations by the Germans and that the 8th Section of the 



General Staff in Kb scow was therefore engaged in the crypt analyeii 
of e pansy radio traffic with an overall control bains sxsreised 



by the NKVD 



But In view of what has already been pointed out 
regarding the Bus si an concept of security, it seems 





that these prisoners would be able to give many details regarding 

technical work of toe 8th Section of the General Staff and 




certainly no details of Russian successes In crypt analysis, since 
peraonnel possessing such technical knowledge would not have 
seen round by tn© Germans In a combat area* Even In the rtald 
of cryptography, the G-ermana found that again and again they 




elves were often hotter infonrad regarding Russian atoms 
than the cryptographic officer being questioned since he knew 
enly hi a own system, the one he was working with at the moment 
and could tell at moat the ay a tens 3 with which he had worked 




10* The Functions of the Crypt anal 





a crypt analytic group or Group II of the 8th Section 
of the General Staff In Mo 8 cow is said to deal with th<* 





cryptanalysis of foreign cryptographic systems p the orga^iz 

traffic analysis and Interception of such systems, and the 
evaluation of the products of traffic analysis and crypt analysis 




writes that according to the statements of prisoners, 
deserters and agent a f primary importance was given traffic 
analysis, direction finding and observation of operations while 
crypt analysis was able to show only scent results in spite of 
extensive employment of personnel. However* considering the 
Russian i&ent^llty, tholr api^iasa and talent for mathematical 





tare and secret affairs, it would be very strange Indeed, „ 
the largft staff of scientific employe ee, Including Ungulate and 
mathematicians, said to have been active In crypt analytic work 
In the 8th Section of the General Staff in Moscow did not achieve 
at least some success In this field* 



While very little is known regarding the successes 
or lack of successes of the crypt analytic work in the 8th Section 
of the General Staff of the HXKk In Moscow, It is clear that 
Russian traffic analysis wag able during the war to achieve 



very considerable successes to 
by intensive use of men and e 
of various German circuits* 




E.Jir 






sorrow of the German co 

and uninterrupted observation 




s fop instance the Russians 
monitored with great persistence the arrival and departure of 



German pi ansa at all sorts of airfield a* 
of call signs on the German ©art often 



An 



antl 





part often gave them a chance to 
determine the number of planes and their fcypa and to recognize 
what they were dolnj:* For more unpleasant for the German f^ont 
in the East, vhich was often very thinly held In insufficient 

h t was the fact that the Russians by studying indicator 
groups and by direction finding recognised the joints in the 
Herman front and concentrated thoir attacks on these points which , 
as everyone knows f ©re likely to be the weakest* This is the 

considered opinion of Alex Dettmann* 






interesting from the point of view of 
Kusaian techniques in traffic analysis ia DP 1^3, "Manual for 
Analysis and Utilization of Radio Intelligence Material* w 
It is a draft translation of a Russian manual published oy 
the Intelligence Department of the General Staff of the Red 
Army, Moscow I9I44. Chapter I deal 3 in detail with the information 
to be obtained from radio intelligence, its importance and 
method of utilisation, Chapter II, covers the basic types of 
radio nets. Chapter III is on direction finding service and 
analysis of bearings, and Chapter IV gives methods of analyzing 
and utilizing radio intelligence data- This Russian manual was 
designed for the tactical level and careful perusal of it leaves 
the impression that the Russians possess a highly sophisticated 
concept of communications intelligence* And If this be so then 
it is probable that they are equally proficient in the related 
field of crypt analysis 4 



This assumption id further confirmed whetf i-t is 
realized that from the degree o-f* -security evidenced by the 
cryptograms df a given country can be deduced with absolute 
certainty the existence and extent of a cryptanalytlc unit and 
its direct Influence on the cryptographic systems of the 
country-, 



For 



when simple codes and super encipher monts 




example w 

are used side by side, thru in times of increased activity 

nee shows again and again that if adequate controls 
are lacking code clerks pressed for time encrypt mo a sages 
secret content in simple cqce in order to save the time re 
r anc lpherxnent* 







by 



Proof that the cipher personnel ha£ not been trained 
experts of the cryptsnalytlc service and is not constantly 
supervised by such exports is found also In less pronounced 
cases* such as, carelessness in giving preference fco certain 
indicator groups or the often unconscious preference for certain 
rows and similar phenomena of which the code clerk is 

unconsciously guilty. 




If, now, such breaches of security era not to be 
observed in tho encrypted traffic of the USSR or are limited 
rare exceptional cases, It is possible to deduce from this 
fact that the Russian cipher personnel is eithor far supe 
to that of other countries In training and awareness of its 
obligations or that the handling of all systems by the c 
personnel la subject to such strict and regular control that 

errors or habits are either avoided entirely or are 
discovered at once and stopped* Since the former possibility 
is not very likely, only the second explanation remains* 



to 
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_ _ ___ e It must be &3su_xed that this control - 
because or its effectiveness - la in the hands of cryptologiats 
because only tboy have the necessary experience to recognize 
at one© all mistakes which ere likely to compromise a system* 

11* The Functions of the Technical Grouj? 

DettToann reports that before the reorganisation of the 
RKSA in 19if2j the task of working out new cryptographic material 
was divided between Group I (Cryptographic) and Group III 
(Technical)* While the technical group undertook the purely 
oretical development according to cryptolpgic principles* 
e cryptographic group checked these with respect to suitability 
and convenience. That is, the cryptographic group had the final 

srord aa regards introduction and die tri but ion of 
cryptographic materials, f 'Phe generation of infinite digit 
sequences to be distributed In the form of one time additive 
pads was also probably done by the technical grcupn 

on of systems of call signs and the allocation of 
wave lengths is a aid to have likewise been done by this group* 
The technical group seems therefore to have been concerned wi 
the actual production of cryptographic materials n Beyond that 
Is supposed to have been occupied with the development of 

achln*>3 f possibly ail so cryptanalytic machinery, and the 
choc king of inventions and proposals received from outside 
sour co q- After the shift in l*)k2, it la said that the technical 
group devoted Its principal attention to the development of 

circuits. 








c 




er 






12* An Opinion Heffitrdjnjr; tho Future 





Army was centralized up 
General Staff in Hosoo 




ttraann ventures the 




It has been pointed out how the development and issue 
of cryptographio material in the Ked 
to March 1^2 in the flth Section of the 

the course of the war with G-erirajay brought about the 
decentralisation which was in effect until the end of that war 
in 19^5* As regards the future, Alex 

opinion that the 8th Section of the General Staff in Moscow 
now that the war ie over, return to the former central 1 sat ion 
of the development and issue of cryptograpMc material. There 
are two very good res son 3 for the Rue elans to make such a 

In the first place i the administration and control of 
the elaborate apparatus can be handled much more easily in this 
way and, In the _.rcond place the sole reason for the chango in 
1%2 - the possibility of capture by the enemy of secret 
documents - no longer hold a. 




1 1 1 * QftGAWXZ&TION OF CKYPTOLQGY IM THE PEOPLES C DISM ISS AH IAT_FQH 

IN7KRHAL Af'PA 




A. ThfiL-Vasfenqsa of the Apparatu s and the Consequent Need 

for a Coinw.unlca.tlo rig- 

Before presenting the few details that aro known 



concerning the organisation of Crypto logy in the 1IKVD (People a 
Commissariat for Internal Affaire) It mir^ht be well to stress 





o of this organization In the political, military, 
and economic life of the Soviet Union* 

The baelc task of bfto BKVD * + m to assure the 



continuance of the political structure of the USSR* To carry 
out the necessary measures the HKVD had at Its disposal various 
types of troops of its own - NKVD troops - which wore assigned 
and employed according to need by the Central Office in Mb scow 

(GOP MKVD, Central Administration of 1JKVD Troops) 

Prom an evaluation of the tfe suits of traffic analysis 
and crypt analysis on Bu^ si an traffic the Germans were able 
to establish the following catsgoriea of NKVD troops: 




Troops of the Interior - The "Political Section SKVD W has an 

ve network of agents to note any trend ho a tile to the 
Soviets* The actual combatting of any such movements is by 
contingents of these "Troops of the Interior, " When there wan 
an occupation of foreign territory during the war, the number 
of political sections Increased: materially *lth consequently 
a very greet increase in the number of contingents of "Troops 
of the Interior' 1 * ™ 




Escort Troop s - The sending away of politically unreliable 
elements, Surveillance, and control of concentration camos as 



11 as the setting up of penal camps and penal battalions 
fall in the province of the "Escort Troops" NKVD* 



Fro n t 1 e r Tr o op s - Because of the special political structure 
of the u£3K, ft was neccasGtry to provide for sealing the 
country hermetically from the outside world* This is tho 



function of the "Frontier- Troops" NKVD* Corresponding feo 
their task, these troops have aircraft available and along tho 



water boundaries, appropriate watercraft* Before the war 
troops were deployed' along the actual frontiers but with the 





J! 




of hostilities regiments of "Frontier Troops" 
were employed some 30 to 60 kilometers behind the combat units 



of SfCKA (Red Worker and Peasant Array) to fbrm an unbroken, very 
mobile, and deeply deployed security sone* HKVB forward a toffs 





employment of these regiments; these staff a 
were located In the Immediate vicinity of the forward staffs 
of the Army but received their orders from NKVD headquarters in 



Moscow, The task of this security sons was to prevent desertion 
and Infiltration of enemy agents by sealing the sector of the 
ffront from the roar area; by mopping up pockets, and clearing 
areas near the front of cut-off enemy troops and bands; by 
removal or resettlement of the populace for political reasons I 
by return o£ population for repair or new construction of 
roads, defense installations, air fields, and plants of value 
to the military economy; by guarding supply? and by collecting 
and transporting prisoners to the rear* 





entire economy of the Soviet Uhion, in 
a military economy and transportation system are 



k W - U ■ f*"—" - — —J — «M 

arp control and thus under the influence of the 




'Jheraas before the war this control could be oxercls 





local organs of the HKVD, after the outbreak of 
hostilities It became necessary to take over also the protection 
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of the railroads along with their control and for this purpose 
especially trained troop contingents ff * Railway Troops n JfKVD 
were formed * They guarded transports, depots, bridges, junction 
points, end important as veil as threatened stretches of 
railway track* 

■ 

Operative Troops - In various phases of the war the need 
appeared for ""very daring and reliable units at danger points 
in the line or at point a of concentration. Such elite troops 
were formed by the ME YD and a' signed to dl visions of the RKKA 
arnies as "Operative Troops" HKVD* 

In addition to the major tasks already outlined the 

NKVD was charged with the carrying out of the following 
supplemental tasks: (1) The political training of the RKKA 
by means of political units, political commissars, etc. 
(2) The training of a number of military specialist S-J such MS 
sharpshooter units; select ion and training of all replacements 
for medium and high-^rade officers in the RKKA, and all tochnical 
signal personnel including those engaged In cryptographic work* 
(3/ The conduct of training schools for dogs and carrier 
pigeons,. (ijj The combatting of espionage, sabotage and the 

activity of enemy agents » This work was done by the SWERSII 

(Death to Spies), an agency under the control of the HKGB 
[Peoples Commissariat for the Security of the State)* ($) 
Direction of the activities of partialis end the training of 
agents for work behind the German front* (6) Mobilization 
and drafting of recruits for the fl&KA- (?) Recruiting workers 

from a^ong the people of occupied areas into labor battalions - 
(8) Integration of armies and units of foreign nationality into 
the framework of the RKKA. 



With such a powerful organization having tentacles 
which reach into the furthers st crevices of the political, 
military and economic life of the Soviet Union, it is obvious 
that the NKVD must also have possessed a far-* flung communications 
complex and cryptographic systems of its ovm* 





Gen trail gat ion of the Productions of Crypt ographic Systems 




It is said that the Central Office for the 
service of the HKVD organs vaa located with the GUF UK YD (Central 






stration of HKVD troops) in Moscow. Organization and 
functions of this section in the field of crypto logy are not 




In contrast to the cryptographic systems of the Army 
and Air Force, no cryptographic systems of the NKVD were ever 



captured by the Germans while they were still In use* At 
various points on the front figure HKVD codes did fall into 



the hands of Gorman troope but either they were than no longer 
in use or they represented reserve systems which, due to their 



capture, were not put into use. Consequently there was never 



she urgent need whl h brought about the decentralisation already 
noted in the case of HKKA cryptography but instead the NKVD 
Cryptographic Central Office in Moscow was able to retain the 




thod of can trail sat ion for the production, Issue and recall 
of cryptographic material throughout the entire war* For this 
reason the Section of GUP HKVD corresponding to the 6th Section 

of tho General Staff of the RKKA in Moscow was not obliged to 

fc e any radical change in the further development of 
cryptographic systems but allowed them to remain substantially 
unchanged from the time the Germans began systematic observation 
down to the day of capitulation- Therefore in spite of the 




groat number of different NKVD organs there was only a very 
limited number of HKVD cryptographic systems in use and It was 
also true that these were valid for a relatively long time, 
often more than two years * Consequently there whs the chance 
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for the German cryptanalysts to do extensive work on great 
amounts of homogeneous material and to accomplish more with 
far lass personnel against NKVD cryptographic ay a tern a than 

waa the ease with KKXA systems. 

All Internal radio circuits of the OSSH were not 

■* ^^^^ 

only monitored and controlled by the NKVD but in many cases 
were directed by it and in all probability the GUP UKVD was 
also re sponsible in large measure for the Issue of any 
cryptographic material which might be used for encipherment 
of such internal radio traffic* The German a of necessity gave 
some nt tent ion to the interception and docryptraent of this 
traffic. Among other things! special units were devoted to the 
reception of the Baudot traffic passed on many of these circuits 
by high-speed transmitters. It la reported that of the entire 
traffic monitored at great expense by the Germane , at best only 
10% was useful for economic leaders while military-political 

matters constituted haitilj 1$* Prom this traffic German 
evaluation results lay almost exclusively in the economic field * 

C# The Decentralization, of Production of Cryptographic Systems 

for use of Agents 

The NKVD also had an important share in the preparation 
and issue of cryptographic materials for partisan organizations 
and for the agent a and espionage service* In view of the 
ini tial multiplicity of parti a an groups which operated 
Independently and of the often very extonslve employment of 
agents and epies in the enemy* a rear, it was necessary to 

provide for current replacement of cryptographic systems, in 
which connection it was of primary importance that these 
should be convenient, simple to use, and yet secure* This 
responsibility could, not be met by a single- centMl unit, 
however large; therefore the individual partisan staffs, 
which for the laoet part were located in the immediate vicinity 
of army front staffs, were assigned the task of producing and 
distributing such cryptographic systems, although all of them 
were subject to the guidance and control of the NKVD* Although 
the systems used in partisan, scout, and agent traffic, from 
the simplest to the most difficulty included sos» which were 
neither theoretically or practically capable of solution, it 
can be stated with good reason that in many respects much 
latitude was afforded the Individual Imagination and discretion* 
A norm, similar to that in the 3CJV systems of tho rtKKA, did not 
exist* The structure and use of cryptographic means had to be 
adapted here to the momentary needs of agents who often worked 
alone. 



D* |fae High Souse of Responsibility of personnel. Handling 

t Paraph 1 c " " — - ' — — 




Considering the vastness of the NKVD apparatus and 
its consequent use of a complex eommun Icatlona system, one 



unique characteristic was noted by the Germans during the war a 
This la the high degree of training and the sense of 
responsibility of NKVD personnel which prevented any 
cryptographic ays terns of the NKVD which *ere still in use fToai 



falling into the hands of the Germans during the entire period 
of the war. This is indeed amazing since the Germans proved 
conclusively time and again throughout the course of the war 
that the complete destruction of all secret documents of a 




is a practical impossibility* According to the German 
account of their experiences in the Balkan Campaign, the Greek 
and Yugoslav Governments had obviously issued orders fbr the 
destruction of all secret docunrents, yet the amount of captured 




material was so enormous that It had to be shipped In _ 
up the Danube to Vienna and from there to Berlin in freight 
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care and nearly two years elapsed before a systematic evaluation 
of these documents was finally concluded by the GentrAl 

Evaluation Section la Berlin* But during the German advance 
into Russia, up to the saiga of Stalingrad in 19i±2 t the 
operational area of the Frontaufklarung (military Intelligence 
in the operational area) comprised upwards of 3 trail lion sq* 
kilometers of Russian soil and el though many, many documents 
had been abandoned by the Rue el ana In the battle and contrary 
to orders t over 3*000 cornpriaing only the most Important ones 
having then been re^isiered at Wall! Ill (the German center 
for tactical counterintelligence on the Eastern Front), still 
no live cryptographic me tor la! of the tffCVD wee found at this 
time or even during the entire period of the war* In this 
connection it might be mentioned that our aim TXCOM effort 
against the Germans nrhich saw the first exploitation team 
die patched in April 19hS able to salvage approximately 
kDQO separate German documents with a weight of about $ tons 
and this does not include materials captured in the heat of 
battle end passed to military intelligence for immediate 
processing* 

Lack of German Knowledge Regarding, e Russian Organization 
for Cryptanalyals 

Not a thing is known about the possible activities 
of an agency of the NKVD In tha field of cryptanalysis. The 
subject has already been touched on above in the discussion 
of a similar function being exercised by the fith Section of the 
General Staff of the RKKA, The conclusion la that the SKVD 
is active* whether in absolute control or merely maintaining 
its customary surveillance in a more subtle way. it matters 
little. 
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ORGAN I 2 AT IQg OF CRYPTO LOGY IN OTHER AGENCIES: 



A. The External Communications 



— i 




In the organization of erotology in the Soviet ago nc lea 
far mentioned we have been cdncemed for the most part with 
strictly internal communications ■ VOien we come to an examination 
th© 



of 

are 

dur 






communications of the USSR, at least three agencies 
mentioned by the Germans a* using cryptographic materials 
Ing this period. In the diplomatic field we have the 
ssariat for Foreign Affairs, in the commercial field the 
es 






B 



aj&riat for Foreign Trade t and 1b the coammnist- 
arnational field the Comintern as it was called at that time. 



Affairs 




Ko mention is found in these sources r agar ding the 
authority for the compilation, Issue and recall of the cryptographic 
materials uaad by tha Peoples Consul a sari at for Foreign Affairs. 
In view of what has already been elucidated with respect to the 
activitiaa of the HKVD It seems probable that here too they exercise 
803e sort of control. The use by this Commissariat of the one«time 
additive pad for re- encipher ment of Its code la exactly the me*oia 

by the RKKA for the re-enelpherment of its operational 
e Chiffrecode* 







os Commissariat for FOrci 




Tr ade 



The 



Peoples Commissariat for Foreign Trada also uses an 
additive pad system for re-en clphenqont of its communications* In 
fact each Corarai esar iat has Its own code book and the pad system la 
generally used for the re- encipherment of the external communications 
passing to or from the head offices In Moscow, 

D. T he CQf^:unlat»In ternationai 







in the cryptographic syatema of the Comintern for 
its signal consaunications with the Communist parties in fore 
countries is there an exception in the use of the additive pad, 
such, — here the most essential parts, the keys for the enc 
ma at, are not outwardly to be recognised as cryptographic material, 

necessary digit sequoncos being derived from a book text by 
me ins of a mnemonic key- This development corresponds to th© in- 
troduction by the NXV]) of similar systems in their agant organi- 
sations and in point of fact one of the function* of the Comintern 
Is espionage! political, economic or military according to oppor- 

While little is known regarding the chain -of -command for 
iaaue and usage of cryptographic materials in the foreign services 
of the US3H, the logical surmise i 3 that the HKVD through some of 
its many organs exercised Its usual surveillance. 
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V, THE BASIC SYSTEMS AS FQUKD IH RUBSIAK CRYPTOGRAPHY 



~ - - 



A- Substitution Systems 

All the substitution systems found by the Germans 

111 the cryptanslysis of Russian traffic are definitely code 

s» By code is meant not only a substitution system of 




considerable extent having arbitrary numerical or letter groups 
assigned as substitutes for the syllables, words end phrases of 



the language but also those substitution systems of small size 
which have values for elements In addition to single letters 
of the language such as nark a of punctuation* the 1 -digit 
numbers and « few short words which are frequent in the traffic 
of the service for which the table is compiled. It may be 
noted in passing that the only case reported by the &or 




of a true monoalphabetic substitution being used by the Russians, 
and that without re -enciphe intent, was between two radio operators 
in traffic concerned chiefly with women* Evidently it was a 

system being used without authority.. These code systems 
varied in size from small signal tables with 100 groups or less 
to large books with. 2^,000 groups or more* They will be classl- 






to the lengths and types of code groups used la 
the substitution process, that is, into 2-figure, 3-flgursj 
2-figure -letter, etc. The original Russian designations will 
be indicated when known. Details of the various methods of 
re-cncipherment that were used with these cod© a will be given 
under a separate heading* 

1- 2-Pigure Codes 



Small signal tables comprising about 100 plain elements 
represented by 2-dlgit numbers were used by the fluaaians to en- 
cipher the operational traffic of the array and army air force 
ffroni regiment down to platoon during 1935 and until the change 
In organization of the RKiLA which took place in 19^2. 
original RKJtA designation was FT or chatter table. Signal 






tables of similar construction were used by the NKVD 
communications of their Frontier Troops and Coast Guard Units 
during the same period, but since the internal arrangements of 
the vocabularies of tho BKVD tables {recovered by the Germans 
only through crypt analysis ) evidently could not be m 
coincide with any of the basic arrangement a of those captured 
in tho "FT" series, it is likely that for NKVD usage there was 





another designation. The PT-3S (chatter tab: 3 of year 

was In use from 1935 to 1939- FT-39 vas used during period 




1.939*1*2; PT-ia during period 19l|.i-ij5* PT-U2 and PT-U were 

seen. 



■ 



£11 these substitution tables, _ 
in details of vocabulary, the use of variant readings and 






switch groups, conformed to the soma general pattern. The 
c oils of a 10 by 10 square table were filled, sometimes in 
systematic order p sometimes in random order, with the 30 letters 
of the Russian alphabet, the 10 digits 0 to 9, the punctuation 



marks and the frequent words ueed in operational traffic. 
Along both the vertical and horizontal margins of this table 
the digits 0 to 9 were inscribed in random order ca row and 
column coordinates* En cipher ma nt of a particular word was 
accomplished by finding it within the substitution table and 
tracing orthogonally outwards from Shis cell to the row and 
eolumn coordinates which were combined to give the 2-fi^ure 
substitution. The enciphered messages were sent sometimes in 
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2* figure, sometime* in figure groups* 

Sometimes variants were introduced in these tables, 
that la f each of the high frequency letters of the language 
would be entered two or more times in the table thus giving 
a choice of tvo or more different enclpfaements for such a 
letter* Sometimes also two different plain values appeared 
in the same cell end a wit oh groups were used to Indicate which 
was to be reed. While a switch group might indicate one of 
the meanings, "Take first reading" or "Take second reading" » 
generally the interpretation waa, "Head the entire word" or 
"Read the first letter of tho word* 1 * In the latter case 
one plain value would be inscribed in a cell. 




hfhile the internal structure of a table remained 

unchanged for long periods M the external features or row and 
column coordinates were subject to frequent changes* the in- 
tervale varying fros a day to a weak or longer. These changes 
were effected by means of the so-called "system squares" which 
or« merely latin squares of alsse 10 by 10. The 100 cells of 



a latin square are filled with the digits 0 to 9 in random 
order but in such a manner that in each of the ten rows or in 



sauh of th* ten columns there are always ten different digits* 
Since such a latin square gives 10 different choices for a 
row coordinate sequence and 10 different choices for a column 
coordinate sequence, It Is possible through the combination of 



one chatter table and one system square to generate 100 dif- 
nt substitution tables 






By writing the days of the month along both the 
vertical and horizontal margin a of the 1st in square a key is 

the choice of row and column coordinate sequencers 
to be used in conjunction with the chatter table. 

AH the 2-figure codes of the "PT" series were worked 
a way. As regards the actual mechanical arrangement it 
is a minor detail whether the 100 different substitution tables 
generated from the combination of one chatter table and one 





system square were bound in a 100 page book or whether it was 
necessary to make inscriptions on the margins of the chatter 
table whenever the coordinates changed. It may be pointed out 
that all the data may be arranged on one sheet of paper in a 
square, sise 20 by 20, with lj.00 cells. This lo^o square is 
divided into four equal quadrants. The upper left quadrant is 
the? date or key square* If dates are used for keys then it is 





only 30 or 31 colls of the possible 100 will be 
tilled and the distribution of these datte will be such that 



generally only throe will fall in any one row or column J The 
ipper right and lower left quadrants contain the system square, 
Ldentical for each of these quadrants. The lower right quadrant 





is the PT or chatter table. J Thus the location of a date in 
the upper left quadrant will indicate on the sama horizontal 

In the upper right quadrant the proper column coordinate 
sequence to be used with the "pT" table directly below in the 

right quadrant. Similarly a vertical line tram the date 
will locate the proper row coordinate sequence* Having selected 

rov and column coordinate sequences* encipherment of a text 
proceeds in the manner already explained for the single 
table * 






> 

iTi 




In addition to recovering many of these tables 

rypt analytic ally the Germans also captured some of them during J T"" 
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the fir at year of the war 



And 




the point la not 



^finitely established In the literature examined, it seeme 

~ e that the actual mechanical arrangement was in 




of 



that the n PT 



the ways so far suggested 

m 1 1 ^ _ l_ ni _ _ _ _ m it ■ j K 




Instead* It is 
table was issued without inscription of any 

the back of this table there 




oordinates on its margins 
tfould be two pockets for holding the system squares 



□f the ay a tar 

holder. 



Two 

quare in current use would be Issued to each 
By a vertical folding of the system square and In- 




sartlon in the pocket at the left margin of the 11 PT" table, 
the row coordinate sequence is selected and remains visible 
the 10ft margin. 



at 



of 



Similarly a horizontal folding of the other 
the system square and insertion in the pocket at the 



copy 

top margin of the 



W table will provide the column coordinate 



sequence 



Instead of dates to 




icete the selection of s 



combination of row and column coordinate sequences, the ayste 
square is reported to havo also been keyed frequently by its 
narginal digits, that is, the digits in the top row 
system square are the keys for the selection of a particular 
■solumn prom this square for use as a row coordinate 





table, and similarly the digits 



on the "FT" 

column at the left of the sjaterc square are 
s particular choice of a row from this 



in 
the 



sequence 





3 to indicate 
square to be used as a 




column coordinate sequence on the "FT 1 * table* Following this 
procedure in the choice of coordinate sequences a two-digit 
indicator or key was often found by the German* at the very 
beginning of code messages. 



Methods used by the Russians to generate a new set of 
row and oolumn coordinate sequences from a basic set were also * 
uncovered by the Germans. These were probably measures of an 
emergency nature adopted by the Hues lane during a difficult 
period in the compilation and distribution of system squares. 

It was noted that basic coordinates were sometimes 
changed by the addition of a one-digit constant to all the digits 
->f a coordinate sequence * Two different constants w*re generally 
used, ons for derivation of the row coordinate sequence and the 
other for derivation of the column coordinate sequence, fhe 
two constants would be transmitted as a two-digit indicator 
inserted at the beginning of the code message. 

Another way of changing the basic coordinates was by 
a cyclic displacement of the sequence, that io, by a sliding 
of it relative to the margin of the table. A two-digit 

indicator would be sent at the beginning of the code message, 
one digit to indicate th- starting point in the row coordinate 
nuance that was to be placed in juxtaposition with the top 
row of the PT code and tho other digit to Indicate the starting 
point in the column coordinate sequence to be placed in Ju*t&- 
oositlon with tho first column at the left of the FT code* 

A still more complicated way of changing coordinates 
was found to be the derivation of a digit sequence from Russian 
plain-language or a key word* The letters of a ten letter or 
longer key word wer^ numbered from left to right according to 
Sheir sequence in the alphabet. If this derived digit sequence 
was used unchanged as a row coordinate sequence then a eolumr 
coordinate sequence was usually derived from it. This was 
generally accomplished by the addition of a constant or by the 
use of a substitution sequence* In the latter case* the sub- 
stitution sequence was probably a row or column selected tram a 
discontinued system square. This substitution sequence consisting 



of the ten digit© 0 to 9 in random order was written bo low 
the digit se queue* derived from tho key word so that there 



Ha3 &n alignment digit by digit between the two sequent es. 
The digits of the sequence derived from the key word wore 
then rearranged in the order indicated by the substitution 



u-tquence always beginning with 1 of this sequence and continuing 
in numerical order through to 10 or 0* 

Messages were sent in the FT codes without any re- 

Because of the frequent change in coordinate 





sequences and the snail volume of traffic enciphered using any 
one combination of coordinate sequence s» such additional a&asures 
for the security of these eonwjunications were evidently 
by the RKKA to be unnecessary at that time# However, it is 




interesting to note that unsuccessful attempts were made by the 



SKVD to camouflage its traffic encoded with signal tables similar 
to those of the *?f* series by the insertion of a null digit be- 
tween the first and second, the th£rd and. fourth, the fifth and 



sixth, #te«* 2- figure coda groups* The groups in the trans- 
mitted cipher text were therefore ^-figure, the middle digit 

the null* Furthermore the null digits were used in 
numerical order- It is recorded also that the NKVD did in 




certain instances re -encipher their code messages of the 2 

n FT 11 type by means of a transposition system. 




2* V ariable 1 a nd 2 -Pi sure Codes 

1 ^Ti— — II^iimi ii ii " 



These are 
in 



alphabetic sub- 
ainco a substitution 



value is provided not only for each of the 30 letters of 
°««*an alphabet but also for words, such "repeat 14 and the 




various marks of punctuation- These codes were sent re-eneiphe 
and were intended primarily for the use of agents and partisans 
since the small signal tablos may easily be reconstructed fr 
memory by use of suitable key words jyr phraaea- -and- Hi fact all 

Xo^.eiKSiphermeht "of "messages might 







ordinfv zo agreement on some innocent looking and popul 



Great variety was noted in the methods used for con- 
structing these signal tables, especially was this so in respect 
to the size of the table • Basically the details were as follows: 



The 30 letters of the Russian alphabet, the marks 
of punctuation, and a certain number of other words or 1-digit 
numbers, ac cording to the limitations imposed by the size of the 
rectangle, were entered in a mixed order determined by the use 
of a keyword into tfcw cells of a rectargle of size, say rows 
by 10 columns, leaving in this case three blank cells according 



to agreement in certain positions of the first row of this 




rectangle and completely filling the remaining cells ) The ten 

" s 0 to 9 arranged in a seemingly random sequence, which 
however was generated in some agreed-upon manner from a keyword f 
were written across the top of this rectangle as column coordinates 
The three digits falling above the blank cells of the first row 
were used" as row coordinates for the second, third and fourth 
rows of the rectangle. Thus In the substitution process, using 
a rectangle of above size, seven letters of the alphabet may 
be represented by single digits and the remaining letters of 





abat and the words or punctuation marks will be 
represented by 2 -digit numbers which begin with one of the three 
digits assigned as row coordinates* No matter what digit 
lengths are used for the transmission of a mnssage, confusion 



will not result during the rediviaion of a code teat into 
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substitution units since the three digits agreed upon as row 
coordinates can never st^nd alone as substitution units but 



must be the initial digits of 2-digit millibars In order to have 
meaning in the signal table. The number of letters to be 

oppressed by a one -digit number generally varied between 5 and 

?. Consequently, the number of rows in the rectangle containing 
letters or words represented by 2-digit numbers would vary and 
the size of the code would run from 37 to 55 filaments, 



Generally speaking* messages encoded by means of 
signal tables of this type were re-enciphered by either a trans- 
position or additive process and the Gents an a undoubtedly learned 
of this in the more difficult cases only through the capture of 
agents* However, the evidence is that non- re ciphered messages 
were also sent In codes of this type and in the cases where this 
was allowed j provision was made for the very frequent change 
of the coordinate og. a signal table as was done with codes of 
the "FT" series. In the present case only one new arrangement 
of the ten different digits is required for a change of coordinates 
since it la a characteristic of this system that the agreed 
positions for the blank cells in the first row will Indicate 
the digits In the column coordinate sequence that ere to be 
used as row coordinates. 

3* 2 -Fl . gu , r e - Let t er Codes 

Code groups composed of nixed elements* in this case 
combinations of one digit and one letter , were noted by the 
Germans in the traffic of certain border guard districts prior 



to 




■ 



The characteristic 10 by 10 signs! table of 100 cells 
was filled in miaed order with the letters of the Russian 
alphabe t * the one-digit numbers* the marks of punctuation and 
the frequent words or phrases peculiar to the traffic of that 
service* The signal tables were different for each district 




the original MftVD designation e unknown* The method of 
enclpherrrsent is similar to that already noted in the case of 
the 11 FT* tables only hero we have ten letters of the Russian 
alphabet In random order s,s column coordinates and the usual ten 
digits in random order as row coordinates* These coordinates 
changed daily * the numerical one e being selected from a digit 




•p 



e and the letter ones from a letter square* It is likely 
that these system squares were folded and Inserted in pocket 3 
at the back of the signal table in the Banner already suggested 



for the "PT" tables* 

k* 3* Figure Code a 



a* The VAK- 




The last general alrforce system to be used by the | & = 

Russians ia said to be the VAK-33, Air Force Code of * 



was a 3 ^figure code comprising some 800 groups 






contained the letters of the alphabet, words (no syllables), I > 

cover groups for airplana types* numbers, marks of punctuation I 5 



and composite concepts such as "Airplane — — has made I £p 

emergency landing 91 or n Airfield unsuitable for landing*" I s 






According to thn German description of the system \B 
messages were transmitted in either of three basic enciphermnnta 
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which were designated black, rod or green. The 800 plain- 
elements of vocabulary were arranged In alphabetical order 
and divided also into 80 decades. Three different dinotnes, 
the blacky pad and groan, were asalgnod to each decade. The 
black encipherment by decades had HO differerst dinomes 
the possible 100 being dropped) and similarly for the red and 
green encipher sen tsu In each of these color keys the dinoraes 
ran in either an ascending or descending sequence from decade 
to decade, but evidently no relation could be found by the 
Germans between thGse sequences* each line of each decade 






e different single digits were also assigned and likewise 

designated as the black, red and green enclpherraenta. 

color key the ten lines of a decade had the ten digits 0 to 9 





arranged in numerical sequence , only in passing from decade to 
decade the starting points of the sequence were 





respect to the top lines of the decades. This sliding seems 
to have been in an irregular manner, that is* when passing from 
decade to decade in the alphabetical order of the vocabulary* 
The enciph&rment of a plain-element was in one color key only 




and wns indicated by the digit group composed of the dine ma 

of the decade and the wonome of the line in which it was f 

In the vocabulary. Only the one color key was used throughout 
encipherroent of a particular message > 




The Germans report that re-encipherments of each of 
these three b&sic codes were quite frequent* A re«enclBth«rraont 



was accomplished by a dinome substitution for the A3 element a 
of the groups j the element C remaining constant within the 
basic enciphermant. That is, the tterroane imply in their des- 



cription of the that it consisted of one book only with 





e possible readings per element of vocabulary being 
aiatinguished from each other by the color of the printing or 
their position on the line of the vocabulary and that re- 
encipherments ware applied to ^ach of these three basic codes by 
a second process of substitution from a dinone table. That is, 
the cryptographic clerk had to remember to keep to the one 
^□lor key *jhen using the book to encipher a mess ago end then 
saving produced an intermediate tezt, he imposed on it ano 




substitution process in the classical manner. Evidently the 
Germans were unable to force a furthar reduction in the procoss 

This la a particularly interesting development in 
e trend definitel y established for code books of the 
, namely* re™ encipher ments were produced by the 





of the vocabular 




ne buds vi tut ion ttblea in pockets st the 
, and a trend also suggested in the ttso t 
sigrii.l tables of the W PT™ type and probably also those of _ 
SBV" type. But since it has not been established that a copy 
of the VAK-38 was over captured by the Germans and in splto of 
the fact that there is good evidence that substitutional re- 

sncipher merits of inter 

itep by the Russians in a case to be discussed later, it la here 
suggested that the above description is only based on the result 
of German cryptanalyais and that the actual operations of 
encipher me \t and re~oncipharment msy not have been as complicate 
as thought. Three separate and current editions of the VAK-38 
nay have been involved and these were designated by the Germans 
as the Black, the Red and the Green VAK-38. If three volumes 
were actually involved, then it would be a simple matter to 
-fork the re- encipherments for each volume by the Insertion 
11 noma substitution tables in a pocket of the vocabulary in a 

ner similar to that said to have been used for the " 
books. While the actual size or format of a page from 
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VAK-38 does not seam to be definitely established from the 
pre sen t sources of inform* tioE, the fact remains that the cod 
is of such small size, only 800 plc.in entries compared to 
for OKK-5, that such a mechanical err angement can be worked 





dlf 




b# Other Books 





or 



other 3- figure codes are said to have been used 
by the Russians nl though none are specifically described in 
these iourcoii Th& Air Force used many of them for practice 
In connect Ion with the manoeuvre^like parade on 1 Kay in Moscow. 
Starting and landing reports, weather reports , operational 
nee sages of the air units arriving from all part a of the Soviet 
Union to participate in tho parade were enciphered with these* 
?or the most part these 3 -figure codes were systematic that is, 
alphabetic or partially alphabetic as regards the arrangement 
of the vocabulary with respect to the numerical order of the 
substitutes* The else of the vocabularies varied from 500 
1000 elements, The vocabularies generally contained entries for 
all the letters of the Russian alphabet, the frequent bl grams, 
the wks of punctuation, the prefixes ajad suffixes characteristic 

the language A the frequent words peculiar to a particular 
service and the numerals. Changes in enclpherment are said to 
have been made in a manner similar to that used on the 2-figure 
codes, only in this case it was a "single digit substitution 11 
for the elements A, b and C- These elements were probably the 
lumerlca] designations for the page, the line on the page and 
;h<: column on the page where the plain reading was to be taken, 

evidence Indicates that while the ro-*encipherment process is 
equivalent to the use in rotation of three different 10 -digit 
substitution sequences, in which esse all first digits of the 
3- figure groups of Intermediate test will be re-enciphered froi 
the same substitution and a parties! -jut digit whenever It occurs 
in this first position will take as a substitute only the single 
value, it was probably accomplished by the interchange of various 
substitution babies at the margins of the vocabulary* En the 




present case it can still be done by the use of 




two tables 



and this is generally true for all vocabularies of 10,000 
elements or less and provided of course that the re-encipherments 
art confined to the use of monome or dinome substitution tables 
'tfhich are always used in phase with the elements of an inter- 
mediate code group AB, A§C, or ABCB* 

Prom the present sources of Information it is difficult 
Co pin the use of s certain method of re-encipherment to any 
particular code book* * 
re*ene£pherment were 
3-f Igure or Ij-flgure, 
Additive 11 methods for 

tless both m 



Without doubt "additive" 






side by side* 



c 

The 




on 



IB 



methods of 
small codes, 2- figure, 
dates the introduction of 
e to the ysar 
tables and "additive 11 were used 



so used on all these 
Alex DeEtmann 

• i? of 




a 






discussion of kt -j methods of re-encipherrnent 

which actually do require a second step or process has been 

for a separate heading* 

5* jj^ Figure Codes 

e* The 



a? 



F. 



e I 



Z 






■ 




of 



the Ij.-flg^i 




containing around 5000 



re type 

and oficially designated aa "0KK", General Commander 
were first used by the Russians in connection with 
manoeuvrea in the Volga military district and various editions 






* 
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uni cat ions 



continued to be used for the enciphement of the cot____ 

of amy, ©orps, and di via ion until 19^1* It is said that 
such extraordinary technical skill was a hcirn in the compilation 
of OKK-5 that its successors nee dec only alight changes as 



regard* choice of vocabulary * The swift succession of four 
great codes In tho course of the y&ars 1939 to 191*1 is explained 

by the fact of their caj iure — "OKK-^ 1 ' In the Piano- 




Russian war, to "OKK-B" In the Gem an -Russian war. 




se codes with the exception of OKK-fl, however, had been 
recovered antfLytl cully and were being read currently by the 
Germans before their capture. 






Tha Germans seem for a dew time to have been under the 
ession that a re-enclphermenb wag being applied to a basic 
figure code book, one dinome substitution table being used 
for the elements 11 AB" and another dlnome substitution table for 
the elements "CD"* But the Evidence seems to be that the 
Russians achieved this effect and avoided the extra operation of 



an actual re-encipheraent by roe an a of a very clever arrange- 
— * of pockets for Insertion of dinome tables in the covers 




of an unpaglnated book containing only the vocabulary, a trend 
vhlch has already been suggested, in the dissuasion of toe actual 




of the n FT** table and Its component, the "system" square 




& copy of an n GKK n book is not available for 
proof and although the meaning to be taken from the English 
translation of the description In German li obscure on some 

points, the following description of 0XK-5 is thought to be an 

— urate Interpretation and typical of this series. 

The vocabulary is a book of 50 pages with 100 plain 



groups per page. Each paga has Z$ lines ac that there are k 
columns of 25 plain groups each to a page, These groups are 
arranged in alphabetic order and consist of letters, ayUafalee, 
words, phrases p the numbers from 00 to 99, marks of punctuation 



cover names for plane types as well as a few reserve colls for 
additional entries, The pages of the book are tound along the 
□ottom margins and printed on one side only, that is, it is an 
end binding rather than a side binding. No numerical reference 



are to be found either as paginations' or as column or line 
indicators in this book* However, the pages do show letter 




indices not only for purposes of easy reference tot- 
vocabulary but also for a more important reason which will be 
presently clear. The first 25 pages show positional letter 




es at the right margins and the lost 25 pages have them 
at tuft left margins. ISieso 50 different indices, probably the 



initial letter or letters of the first word on a p^;e, are 



distributed over the 25 lines per page of both the right and 
lei* margins so that the position of an Index uniquely determines 



a page. £ho margins are cut to var Ing depths to provide a 
visible index system 



Instead of assigning numerical code groups to the 
elements of the vocabulary in the orthodox manner it is now 
possible to work a clever mechanical arrangement whereby a 
completely new random rep agination may be obtained whenever 



ceslred without going through the aeoond step of a re-enclpharment 
by conversion tables as has often been dona in the past* A 
rocitet is attached to the inside of the back cover of the book 
to that two ninomG substitution tables may be inserted, one 
overlapping the right margins end the other overlapping the 
left margins of the pages. When the tables are correctly 
folded and inserted in their pocket j two columns of 2? dlnome 3 






be visible against the right margins of the pages 
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two columns of 25 dinomes each likewise vlsibla again at the 
loft fljerglns of the page*. That is, wh«n th* book i a ope a 
at any given page, four* different dinomes will be visible at 
each line, two at the right extremity and two at the left ex- 
tremity . Since we have 100 positions for vocabulary on a page 
or k columns of 2$ and 100 different dinomes visible at the 
margins, also t columns of 25, It is possible to indicate 




a plain group on a page by the position of a certain 
dinome in a particular alignment of the two dlnome substitution 
tables with respect to the basic vocabulary* Furthermore the 
paga may also be uniquely determined by either of the two dinomes 
standing immediately opposite the index letter on that page. 




any plain group In the vocabulary may be represented by a 

4 -digit code group, the first two cigita of which indicate the 



page on which it is to be found, and the last two digits the 
line and column of that page* In addition, since there are only 
50 pages in the vocabulary and a distribution of the 100 different 



dinomes so that two stand immediately adjacent to each page 
index, two variant p«ga readings are possible at each sub- 



stitution. 



The dinorai substitution tables when unfolded have a 
width of about 1.8 columns and a depth of 50 lines* Only the 
dinomes 00 to k9 will appear on the left table and only* those 
from 50 to 99 on the right table. The margins of these dinome 
" '"eg will be indexed in numerical order* If the numbers from 






to Z\ are used as indices to the columns of the left table 



the numbers 25 to l& will be the indices for the lines of 



this table, the latter consecutive numbering being repeated 
swice since there are 50 lines. Similarly the numbers from 50 
to 7h will index In numerical order the columns of the right 
table and the numbers 75 to 99 in numerical order and repeated 
will index the 50 lines of this table* These marginal Indices 
serve as indicators for the folding and placement of the dincme 
iablea in the pocket of the book prior to encinherment or 
decipherment of a message. A 4-digit indicator is sufficient for 



^he correct placement of each table. Thua the indicator 1 

means that the left table is to be folded in such a manner that 




when it ia inserted in the pocket of the book column 11 will be 




ately adjacent to the loft margins of the pages and lire 
.15 is in alignment with the top line of the vocabulary. 
q*~«i-^i_ f 0r fl pi acMl0nfc 0 f ttie r ight dlnome table. 




Because of the limitation on the block of dinomes that 

May appear Internally in each column of these tables, the 

process of deciphering is not too laborious. While only dinomes 
from 00 to 1^9 may appear on the left table, those In the block 
00 to 2h will ho confined to the odd numbered columns and those 
In the block 25 to 1*9 to the even numbered columns. Each 

3 *.£ ave ita 2 ^ diff « r « nt dinomes arranged in a random order 
find the sequence will be repeated to fill the 50 lines. There 
is no relation between the sequences of dinomes in the <f*rlous 
columns. That is, the table is completely random within the 





75 to 99* Thus 




imitations. In the same way the odd numbered coluran- 
*t w? , Q~ table will have in random orders only dinomes from 
the block 50 to Ik and the even numbered columns those from bio . 

_ - ,_ . . a selection of any two uvl( g„, 

columns frcm the left table combined with a selection of any 

5f ?^*?? utlve colunmfl trQ ™ the right table will contain only 
the 100 different dinomes 00 to 99 which ia the condition for 
uniquely Indicating each of the 100 positions on a page of the 

J*T? Al *° for unl( l u * 1 y indicating in a twofold manner 
each of its 50 pages. 



ve 
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positions of the dinome substitution tables 
relative to the coda book were changed from message to message 
and suoh changes vera indicated by two k -dig It Indicator groups 
which wer* generally sent at the beginning of the cipher message. 
Ke 3 sages mre also sometimes sent without indicator groups 
which mean;! that On certain nets the oho ice of Indicator was 




subject to regulation according to a prepared table 
and that in all probability an attempt woe mads tc prevent the 
overloading of an indicator Kith traffic by careless cryptographic 




While the code book remained unchanged for a long time 
unless there was u physical compromise t new dinoiru; substitution 



tab las ware, issued frequently. In soiw areas they were changed 
daily. Of course different substitution tables were required 



also for each crypto net 

Another Ij.- figure code similar to those in the 
aerie a as regard© structure ana method of enciphormont was the 
OSKK-7, General Central Cotr lander Code - ?» It was the eo -called 




railroad and conmunlcation cods for rear area liaison and yielded 
very valuable hints regarding supply and new formations of the 

* It also was captured at the end of 





b. The SUV Tables 




other typo of ^-figure code used by the Russians 
was the system designated as SUVj Camouflaged Communications 
of the Commend, As already pointed out p signal tables of 
this ttype were Introduced by the RKKA at the time of the 



decentralization in 191*2 of the production and issue of systams 
to be used at the front™ Great latitude was given individual 
fantasy and initiative through the fact that the signal officers 
of every division, indeed of every regiment, were able to compile 
and develop their own ays teres for their own areas. 

The use of switch groups to indicate a change in 
reading, that is, "read the first letter of the word 19 or "read 



Sho entire word", first noted in the later 11 PT" tables was 



retained in the compilation of these "SUV* tables and represented 
very considerable advances in security in comparison with the 
earlier small substitution systems* Tho characteristic format 



for these codes was outlined in a general way by the 8th 3c c 
of the General Staff in Moscow* With the decentralisation in 
production and issue of these signal tables it is not clear 
whether the trend was maintained of providing pockets at the 
?ack of the chart for the insertion of substitution tables as 




loted for the "FT* and lf OKK* systems* It is certain *na* new 
tables were compiled frequently and it is possible that changes 
in coordinates were effected by the individual users making 
their own notations or preparing their own atrips* Since the 
use of a particular signal tabla was confined to a very snail 
area, distribution was no great problem. 





These tables were frequently of a size 20 rows by 
8, The 200 cells of the table were filled with 
Russian words and phrases in partially alphabetic order, that 
is, words with the same initial letter were grouped together 
with a fev exceptions, Aside from the most Important words 
used In the specialist branch of the service for which fcha cede 
*£-s compiled* the table contained also the on©- 






most important ffarke of punctuation, the stitch groups e end 
the letters of the Russian alphabet * 
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Three types of coordinates were Inscribed on the 

margins of this table: 

go the ^Ijjjon Ten different 2~digit numbers were 

selected and assigned in random order c one to 
each of the ten columns of the table * 

■ i 

Tp the double row The ten different 1-digit numbers 
were assigned In random order, one to 
the ten double rows of the table* 






(3) To the 9 ingle row ten different 1-digit numbers 

were a a signed in random order, one to each of 



the top ten rows of the table. This digit 
sequence was repeated again assigning one digit 
to each of the ten bottom rows of the table* A 



variant reading for eech of the twenty rows was 
flow generated from this basic sequence by 




in modulus 10 the same constant to each of the 
twenty 1- digit number a * 

Bsciphermcnt of a particular word or phrase is by 
means of a (j -digit group produced by reading the coordinates 
of the cell in which the word ia found in the orders column 

the dinome indicating the column in which the word is found) ; 
•loubl* row (the single digit indicating the double row in 
which it is found); row (one of the two single digits which 
indicate uniquely the particular row of the double row in which 
It Is found). Thus a word may be represented by either of two 
tl^diglt groups* Additional variants are also often produced 
fry assigning several different 2- digit numbers to each column 
of the table, and in theory since there are in all 100 differ ant 




s, ton variants per column are possible. While there is 
no indication that the Russians did make use of such a great 

number of variant readings for a plain element* there is 

*hat the size of these signal tables varied some containing as 

as 2,000 plain elements in which cast* full use would be 
nade of the 100 different dinome a* 





In connection with the above description of a basic 
20 by 10 signal table it should be noted that it is Just as 
effective and probably more efficient to assign ten different 
dinome s at random as coordinates for the 10 columns and twenty 
different dinome a (or forty with two to each row) also at 
random as coordinates for the 20 rows of the table* And in 
point of fact that is exactly the method followed by the Russians 



in many of their 4 -figure S0V systems, encipher meat by d incise 

iiubstitution for •laments AB and CL > The system as o;^iglnalIy 
described may also be worked in this way regardless of the 
limitations noted for the element D of the CD dinome substit- 
ution. Using the latter method as a point of departure it is 
conceivable that the 8th section of the 3KKA in Moscow fixed 





aiae of the chart or table to be used on a certain type of 
crypto net together with the choice of vocabulary* Blank tables 
of the given else would be supplied in quantity and it was 
function of the comp^t^nt cipher authority to vary the internal 
arrangements of this vocabulary in the table according to his 
own fancy whenever making a new compilation* Pockets might also 



be provided at the becks of those vocabulary tables and it would 
be the further function of the proper cipher authority to compile 
his own AB and CD dinome substitution tables fjp insertion, If 




a CD table is to provide row coordinates and there are 20 rows 
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to the voc 





^ . an it la only necessary that 20 

different dinomes at the least bo arranged in random 



dopth of ko rows 





column and fcha aeries nay be repe 

r a variable placomont of tin 

.> . . q.0 rows would allow not only 

a change to new coordlnatee but also a sliding of the same 
coordinates with respect to the vocabulary. Similarly d 
tables for the AB substitution op column coordinates are 
eoinpilad, the requirement 

dinoins3 bo arranged in random orders in the rows 
table. Th3 placement of these dinome tables rel 





vocabulary might be indicated in a manner similar to 
used ior the OKK aeries. Ho evidence was found to au™,- 
tnia tneory regarding the mechanical operation of the SUV 
ys terns, but In view of the trond already noted It is 



suggested that it is more than a possibility 

« «■ *? inco * n SP 0 **** addroaeoa and signatures spelled 
out in letters or syllables afforded the coat 



j.*. vr ayxaaoies arroraed the most Important 

parting points for crypt analysis, the Russians began In 
I9« to encipher these addresses and signatures in messages 
1?,^*, SUV systems with, special addreas and signature codea 
which in addition to names contained also expanded concents 

as oommandor of the 17th tank brigade Tha 





found intei-pra tat Ions of this type very difficult to roach 




. , _ Y ep ® on l? rlaIwd after a vary careful and intensive 
study of the traffic Involved* 

, -. In connection with these "SUV" tables it should be 
pointed out that SUV, Camouflaged Communications of the Command 
seems *,o bo a general term applicable not only to the L-firmre 
codes here described but also to the 2- figure 'or 3-firore codes 
of type* already discussed provided that they „ere compiled bv 
signal officers of the HKKA for use in the lower echelons of 
„ . area. The torm was Introduced under L*fi~ure codes 

3lnce ,^o/»Jority of such si-nal tables were of the k-fl-ure 
substitution type. Instead of being assigned to particular 

code tvooa. tha iMmr- >v=> 





term is better used as indl ^ _ 

in Uo security of tho communications of the 
ther hand, the terrns "FT", "OKK", etc. are the 
Gwrreo* aesxgnationa for codes Issued in a specific series bv 
a centralized authority. ™ 

c » 0 the r 




Another Russian L- figure code, the first general 
airforce codo in use from 1935 to 1937 was likewise character 

oy several reencipherments and doubtless this waa 




aoeompiishod mechanically by the insertion of dinomo substit- 
ution tables, in this case only one table being used at a 
in a pocket at the back of the book. The 




nation is unknown. 







~ According to the German description based presumably 

on the results of analytical recovery, the book consisted of 
ton pages with provision for tha entry of 100 plain elemonte 



per page. The vocabulary was arranged in strictly alphabetical 
c roer and the cells on each page wore numbered consecutively 
from 00 to 99. Por pagination, dinomes wore assigned to each 
page in an Irregular manner, as many as ten different variants 
ceing permitted per par:e. Knoiphorment waa accomplished by 
reading In order: selectively one of tho dlnomes of the pa«e 
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to. 



involved and the dlnome indicating th© position of the plain 
e lemon t on the pa^e* Rcenelpherments wore confined to 
ropagi nations* bein^ changed random y on fcach cryp to-net as 

deoiaed necessary. 

I ■< 

Many other Russian lj.-f injure code "books were worked 
on by the Germans from 1935 until the end of the war. 
Deltmann gives a very Interesting account of fc»w one of the 
TKVD codes was broken* It was a i^fir^uro cods of sorne 25 
pajajes with 100 groups to the page re enciphered uith a dlncrae 

table which changed approximately -'very week* 
It was being used from 1935 on in the border tjunrd district 
of Kaaakstjxn where the troops were of ton Isolatid in winter 
due to frequent dlstrubanoes of telephone and tjlegraph wires 
by snowstorms* It seems that news reports were often received 
In this code and that early in 1936 a speech by Stalin which 
had been printed in "Fravda 1 * and in "Had Star 11 /as transmitted 
to tho border units of Kanaka tan by radio as a cipher messa^. 
This message # some 1600 groups long* waa recognised as haying 
been enciphered by a code which had not yet been extensively 
broken and tha content was soon Identified by larrolca as that 





of the printed speech* Thus was a very irnperfjet knowledge of 
code materially expanded by the Gemans* 





Typical of the KKVD lj-fif*ure codes ii tho one 

"SSERNO* being usad by some Russian Border Gi ard and Security 
Troops at the time of the German capitulation* 






consists of $0 parses with 50 plain elements pv* page* The 
vocabulary is arranged in alphabetic order* It contains tho 
letters, digraphs, trlgraphu, syllables , words t numbers 
0 to 31 corresponding to day dates? marks of ganctuation with 






variants end covsr groups for surnames of military &nd political 
leaders (differ lap; In each net). The parses 01 to 50 aud 

01 to 50 of the basic code art* each enciphered by two 
different dinominal substitution sequences* [ach page and line 
of the basic code can therefore be expressed in two different 
ways thus giving a choice of 1$. variant re a dir. 3 ;s for each plain 
o lemon t since the 100 different dinoinss are available for only 






also for 5° lines of the basic c^de. It is quite 




probable that two dinome substitution tables ire folded so 
two columns of dinotnes remain visible on each table when they 

Inserted in pockets at the back of tho bmk in a manner 
similar to that noted for the ORK aeries. ZiWO was usod on 
more th^n 30 different nets and each not had 20 substitution 




tables for roenelphcrment s 10 each for the pn^e anr3 tho ^oup* 

It Is not clear how Alex Dettmana Uaows that tha 
original Bus a lan resignation for this code izi ZERNO inasmuch 
as it was still in use by the HKVD at the till* of capitulation 
and he is quite definite In the claim that mi live orypt ©graphic 





fi^ro coda frr^uo evidently remains unchanged during the 
various reoncipbGrmcnta 



materials ased by the WKVD were ever captured by the Gemaiu? | ^ g 

Two other ij-Jigure codes used at t?aa time by the I :z •* 

r Guard und Security Troops are reported to be I » 

"tflVA* and ^VIZA". ''HIVA* is said to be ree'n ciphered by two 1 r 

tilnomo substitution tables and "VIZA" by a dlnoios and none- * I 5 

name substitution* In the latter case one d:1^it of the - ** 



3k 



6* 5"Fiquro Co do a 



a. The Chiffroco dea 

m 

For the transmission of radio messages of 
operational content, that is, dealing with, troop conswnd 
on the nets of the upper and top comajand (from brigade 
or division staff uoward to the General Stff of til a RKKA) 
the 5-firrure 1l Chifrr«oode ri , also called *■ Operational Code** 
was used. The n Chi ff re code" was systematically adapted 
. by the Rue elans in the course of years to the changing 
raquiremnts of their vocabulary and was improved in respect 
to security afjainst cryptanalytie attack by more and xaore 
consistent use of variants for the raoat flwquent groups. 
The a© new editions of the *Chiffre" T came during the ww at 
intervals of 6 to 12 months, whereas in peacetime the sa^ie 
code was used much longer* At the boffliminr of the German - 
Russian war code "Cll^A* was In use which was then replaced 
by Code «QZ$-A", "Oii^-A* 1 , "OoS-A" and finally by code "Ogi-A" 
which remained in uso until the capitulation of Germny* 

All these codes, except "O^S-A" which was in use 
from March 1942 to Harch 19^3 , were alike in structure — 
aside from the above mentioned progressive improvements and 
amplifications* They were divided into the general part 
with vocabulary in term! nolo ^io-alphabo tic order and the 
" special part 1 *. The general part contained letters, digraphs , 
triRraphs, syllables, words, phrases, and entire sentences 
arranged in strictly alphabetic sequence, with the marks of 
punctuation 9 fractions and ordinals, hours and minutes, 
numerical designations of armies* corps and divisions, day 
dates, year dates, and calibre designations scattered through- 
out the entire code. In the special part these concepts, 
v;hlch had been entered out of alphabetic, order, were brought 
together once snore in numerical order to facilitate looking 
up fcheso concepts in the code by the code clerk* Code ^Oll-A* 
embraced soiae 19^000 groups which were entered on sonte 390 
pa^ea; the systematic development of the code resulted in an 
increase in the number of s rou P3 with each new edition* The 
last known code "Ggi-A* had some 23*000 Groups C n IpO pa^es* 
The number of variants increased with each new edition of the 
code and in the final edition tf 091-A n reached a total of some 
230 groups for each of the two marks of punctuation, period 
and comma* 

The code "O^fJ-A* fell out of the ranks of the 
terml nolo -ic-alphabe tic codas* It showed interrupted alphabetic 
structure* It is interesting to note that, while all now 
versions of the Chlff recede during the course of the war were 
always captured by 7006 fortune so early that the originals 
uero almost always In the hands of the eiryptanalyst by the 
tins they were put into use by the Russians and consequently 
there was no necessity for code recovery* precisely the more 
difficult code "GifS-A 11 did not fall into Gennan hands until 
some three months after it had been put into use in the RKKA* 
In these three months, however* it had been so far recovered 
by the Serman oryptanalysta, in spite of the essential depart- 
ure from the structure of its predecessors* that they were 
reading currently parte of the messa^s encrypted by it* 

Messages encrypted in these codes were alv^ys sent 
ro enciphered* And there is no question here regarding the 
method* "Conversion 11 tables were never used; It was additive 
and frequently a one*- time pad* 



b* Other Books 

A 5-fif?ure is ode of another type wag also reeo^rod 
analytically by the Germans. It was a major substitution 
ays torn of the HKVB organs used In connection with railway 
transport at Ion * and was a till active on the day of (torman 
capitulation* The code contains 250O groups on 25 pa^es 
with the elamntfl AB and DE of the 5~dir*lt **roup A3CDE each 
being enciphered by a dinone subs si tut Ion sequence- and the 
element C by a raonoroe substitution * With 25 pa^ea of 100 
.groups each j it was possible to express every meaning of 
the basic code in several ways In an enciphonoent and thus 
prevent repeats. For each of the 25 pa^s ( AD } 3 01 to 25 
In the basic code* there were jj. possible choices with 100 
different dinotnes (00 to 99) beln^ aval ldble within an 
enciphenasnt* The Kiddie element C divided each page into 
^ quarters and indicated the quarter used. Consequently 
with 10 dibits (0 to 9) two quarters could be expressed > 
to 2 ways and the other two quarters in ,3 wzays* There were 
then either 0 or 12 different ways of expressing the soura 
basic code group In any ancipherraent* According to the 
German description the expansion of variants ended her 9* 
But since there are only 25 lines of vocabulary to eaoh quarter, 
it would have been possible to have likewise (j. choices of 
dinoraea for the line or DM port of the substitution. Although 
the point is not made clear it is quite likely that the whole 
100 dlnomes were used to indicate the DE substitution, that 
is, one to each of the 100 olemsrj><s of vocabulary on a page* 
since this feature would be a great aid in the correction of 
those corrupt groups which are often present in radio traffic* 

It Is clear that three "conversion" tables are used, 
two dlnonc substitution tablet and one raonone substitution 
tables and that these must change frequently to provide the 
numerous reenclpherxrtents so characteristic of small Russian 
codes of this type* It Is here suggested that these reeneipher-* 
men to were done eis chan ic ally in one step by the juxtaposition 
of tablos with the margins of the vocabulary* 

7* The.. Methods, of Reencipfaprroent 

a, Method a tiHiich Requir e a Second Step 

As already indicated in this paper various methods 
of roenclphei^aent were applied to the basic 2*fisure p Jj^f&gin-e 
or 5*ftgure code books used by the Russians. In 'some? cases 
there has been the question ee to whether a second step or 
proceos wms actually Involved* ife h*ve consistently favoured 
the aiiapler Intorprotatlon whenever possible since the evidence 
seems to Indicate that one and oise authority only has been 
responsible for the compilation of cryptographic materials 
and tracoo of a certain physical similarity In these materials 
have been indicated. Thus, a complicated method of re encipher* 
r»ent us inn conversion tables has often been explained as 
Involving only ono step when it can bo worked in two steps* 
Only methods of poena Iphar&ent which actually require a second 
Stop will be doecribed hero and the use of the conversion 
table , the additive sequence and the transposition to obtain 
Monolpherroents of Intermediate text In the basic 2»figure, 
3-fIcure, etc* code books will bo noted. 
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bm Con v< a ion Table b 



An examination or the available ifcateriiil haa 
revoaled tho us a by tho Russians of conversion tables* as a 
socona stop in the reeneipherment of intermediate text, in 

^ ono i nfltaftcd * They «ore used with the first General 
MCVD code, a 4.- figure ©ode of -10,000 groups introduced in 

This system is aaid to havo been used b t all border 
guard districts or frontier troop o of IJKVD, 
troops of IJKVD and by other mVD organs whether military or 
political , the conversion table a so em to have bo en used onlv 




;he interior 







were rep lacod by additive sequences 








Tho roonciphonnent is acconplished in three phases 
by use of throe different 10-dl G it substitution sequences- 
These sequences nay bo arranged in an enciphering table in 
uio following manner! In line 1 are the dibits 6 to 9 in 
humeri a al order; in line Z aro the dibits 0 to 9 arranged 
-•Mis time in rendom order j similarly for lines 3 and k- "the 
random orders in each case bein^ different so that thrire arc 

« i .MSii* 011 * substitution tables. The reencipherment of 
ths ii-di^it intermediate tost proccods as folloKai In phase 
1 of tho reenoiphomnent, the dibits which aro found in pos- 
itions 1, ij., 7, 10 ate. of tho Intermediate taxt are looked 
up in line 1 of the enciphering tafclo and the substitutes 

eetly below in line 2 of the tables in phase Z of 
the reencipheraont, the dibits in positions 2, $„ 11 etc. of 
the xntem^cdiate text are located in lino I of the enciphering 
tarle and the substitutes taken from lice 3 of the table; 
similarly in phase 3 tho substitutes for tho digits in positions 
-U o> 9» 12 etc» of the intermediate text aro found in lino k 

° f - ^J^J 1 ® fitlU usi "S Una 1 as the reference. Since throe 

t.-.tution tables a, b t c ara being used in i»otatlon for 
reonciphorment of a l^-fl^ure code ^roup, such a -zrouo can have 
only three variant 3 according to the patterns abe*, boab, 

7 ^he Russians wore not long in evaluating the 
cts of such a 3ystem of reenciphorniont and soon turned to 
use of additive* 










I 



to 



s 



c* Additive Sequences 




In the additive 

„ t 3»f injure f t\i* 
is added by addition In 

text to produce tho cipher 




method of 
*o or fj- 

10 to 






the be sic 
cods 3 a long d%it 
the intenaudiate cod© 







Those additive 
their lengths 9 j»tbod 
Gerniana divided tham 

Dad » the tarte. ftfnas> 



sequences nrnj classified according 
\ of use* and methods of generation* 
into five different types, tlie table 3 
addition and tho ksy^boofc* 





— 







an additive sequence of vary short length 
wae uaad for the recmclphemesit of messages in the emll 
" * es already described* It is iirooesiblo to pin the 
usa to a particular coda, area or time. However* it is said 

„ tables were used with all tho small codeii. 2-fi num. 

3-fi^ure or i^-fin^ro* T * 

A tabls i 





thirteen lines and 




a 





serially fro 




ontaiaed 130 five 
ten column* The 
m* The lines of a 
2 and the columns 





groups arranged in 
strl tout ion of the dig! 
table were numbered 
from. 1 to 0 ft 
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s numbering jnado It possible to begin the reaiiclphorment 
at any desired point In the table. Tha starting point, the 
five -digit grotip In tha table which was to bo gin the addit- 




sequence , was announced to the recipient by a 3- digit 
Indicator consisting of the line and column nvnborlng* 





3 








end of the table, the 
remaining 5-digifc groups frequently did not suffice to 
reolpher the entire intoned late text* In such a case the 



reeipherment was continued beginning with the protzp in the 
first line and first column of the table. The "five digit 
groups were taken from the table In normal order, by lines / 

to riftfrfc* 






The tables, called Ganrnia, are said also to havo 
varied in size, some having been soon with 6G, 






120 five-digit additive groups* Tlifi periods of validity 
for these tables are not known. 

The Pad 

s an additive sequence without repetition 
of much greater length than Is provided by the table* A 





table or Oruiaaa table as the Germans called lt # consists of 
zme parse whereas the pad or ''Bloknot 11 is nade up of several 
pages or Gmurm tables* 

The pads likewise served for ro enciphering basic 
s books or iignal tables* They seen to have been used fo 
traffic of a front staff with Its associated array staffs 
□f an amy with its divisions and brigades* 









from the bo t ton of one page to the top of 
■accessary. The starting point Has likewise determined by 
a three diftlt indicator group ixqpartod to the addressee* 




e© pdds op " Bl o fcco t s " *my also be divided accord- 
ing to the manner of their use into two categoric as First j 
the general pad which was used in -he dispatching of mcs sa,f*oa 
content of which was to be available simultaneously to several 
* A table of the general pad could bo used several 





tines, since security was afforded by the use of different 




ng points. The period of validity/ however, for a table 
of the general pad was only one day. Second , the individual 







cfa served merely for communi cat* cn between two partnaro 

one of its divisions, the front staff and one of 




7 



Its armies, etc* A table from the Individual pad was used only 
once, that Is, It was a one-tiiae pad* 

The general pad used for the roanciphenaent of 
messages in the "Chi ffre codes * is said to have contained 31 
tables, each table containing 300 five-digit additive groups* 
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size s of these pads also varied* One type 
consisted of ten pages, each of fchmn being a table of 10 by 
10 five digit groups ■ The lines of each page were numbered" . 
aerially j the lines of page two being considered a continuation J 



?£ the lines of pajje one, "and go on* The numbering of tha lines 
therefore began with 00 (the first line of page one) and ended 

*ith 99* r Fb& columns of each pa^e were all numbered serially 
from 1 to 0t 

The recipherm^nt of the inieimadiate text was 
*coo!m>lished in the sane maimer as with the table 
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At the top and at the side of the table are onto red 2-d3>it 
column indicator a and 3»disit row Indicators which allow the 



encipherer to indicate according to tho orinciple or 



coordinates tho additive 5 roup with which ha bo^lns his 
reenciphormont. Honce in r-eneral tables reonciphomnnt can 



start at any point in the table but must then continue serially 
(probably from par * e to page) until the last text ^oup has boon 



reenelpliered* 




The individual pad used with tho Chi f fro codes" 
supposed to have had 50 tables. Here the sizes of the taoies 
seam to have varied from 60 to 120 fivo-di-^it proupa. Tl 
variation was probably according to the requirements as 
regards message lengths in a particular branch of the service. 




since a table was used only the once and tho atartinr point 
lor rcenclpherments was always the first additive ^roup in the 



table. 




It is interesting t o note that these IJloknots were 



bound in a special way. in an outer covering of thick 




«. Pf? er . tha ^ets or tables were held to s ei:iier on 

tho left side by perforating them and drawing through the 
holes a string the onds of which ware provided with a leaden 
3eal with the impression of the General Staff. This was done 





a way that each single sheet was enclosed in tissue 



;S ™, : aS E. T , that onl ^ °y te«*lnft the tissue paper 
could the iirat sheet be released while the other sheets 

reoainsd sealed* Whenever a new shoot was used, a notation 

nad to bo made on tho inside of the cover. The 





wroro 

aerially 01 to 50. The entire block likewise had 



£-ai^it number which was printed on the outsido of the oove*» 
mere was also imprinted the type of the bio 



i 





general. In addition the pads had a notation usually in 
ink indicating ths formation by which the block was to be used 



sr the area, for example AKORD (army- corps-divia ion), FAX 

i ^??.?" arrey " c °*V 3 i * 0C f cpocial ) and CIRCULAR. The desi'r 



„,._»,-_ . . , „ ^ „_ The desisnat" on 

jTRCULar so ens to indicate that while the pad is a renerai oad 
in the sense in which the term general has already been 
aofined it also has a further limitation as regards the area 
? ^* for instance, 111 the traffic of the armv with subord- 
inate divisions and brigades. Only tho addressee can decipher 
a nesaa^o enciphered by individual additive pad; on tho othe* 
Eland Jiere aro always several holders of a particular circuit 
or ffoneral pad and each one of those will be able to decipher 
a laessa^e so enciphered* 




Iti connection with the uao of the so-called 
tables and Bloeknots by the Russians it should be mentioned 
* fnfiT* 5° J fcrTiann dates the introduction of additive sequences 
to lg^O ana he speaks of the use of "si n^lo" additive until 






* ~ ^ • ■ and tho uae of " double" additive from then to 
the day of the German capitulation. 





the , „ 

nooning was either unknown or obscuro to the translator. It 

^ f£tT\ Sf "tl t6 c S^J* tha oorrect interpretation is as follows: 
aororo 1944 the 5-di^lt groups forming the additive se que nee 

could be taken froia the table or pad in only one way reading 

inthe normal ordor from left to rl*ht on the line and the 
xes rrom top to bottom on the page, re-ardless of whether 
nch an aduitive aequance was used one time or 3everul 





times 



the reenelphermont of massages. After 19kk alternative 



of taking out tho 5-di^it groups from a table or pad to 
additive sequence were introduced, such as, reading 
7, ^alternating the direction when passing from line 
lino or column to column or even reading diagonally. 





In order to avoid the misuse of an additive pad 




either fehrourjh tiro overloading of 
it with traffic by a careless selection of start lug points 
or the neglect to destroy a page of the one- tine pad once 
It had been used, the Russians evidently have evolved a very 





clever device which the Gorans called a "More© roll 51 * 
digit groups were printed in totally unsystematic and random 
manner on a tape* Two identical tap 03 wore printed, one for 
each user, and an identical numerical designation given to 
them. The 21 e tape 3 were supplied to the us ere In the form of 

* Here the starting point could not be selected; but 
was always the first group on the tap©* A eufficiont le 
of tape was unwound or drawn out of the device for the 
reenclpherment of the message* Reenclpherments proceeded in 

the usual nmnrtor by addition In modulus 10 of the five-digit 
groups of the tape to the numerical groups of the intermediate 
text* When the emti^e intermediate text had been thus 




reenclphered vith the five-dl^it groups from tho roll 3 

was cut after the last five-dlrelt ctoud used 








used portion .of the tape was destro~3Q» The receiver had to 
do the sane thins; after deciphering* It seems quite likely , 

i*h there Is no such indication to be found in the 

tho device was constructed in such a manner 
once the tape was with drawn It could never be pushed 
back and would always have to be destroyed* 








It la said that a cipher text enciphered by nteana 
system began and ended with a five digit indicator 
ip, usually not enciphered* consisting of the number of 
the roll (thrue digits) and theg^oup count of the message ( 

) less two (two Indicators )- 






It is obviously Impossible to pin the use of the 

additive tape to any particular code book or slnpml table* 

It is reported to have been used by tho IIKVD partisan, scout 

or agent traffic and this could only have been known by the 
Germans through c 




: *q q s-add i t Ion 




e case of so-called ere a a addition Is a method of 
self-rreneration from the into remediate text* In the slimiest 



form* the intermediate code text was transformed into cipher 



text by prefixin| to it any desired digit (1 to 0) and adding 




lis in modulus 1.0 to the first dlrtlt of the Intermediate 



text* The resulting one-digit sua was entered. This resulting 

was used In its turn an addendum for tho second dl^lt of 





intermediate text. This addition yielded ana the* sum which 
was entered and used also as addendum for the third digit of 

diate text. The sums of such additions to the 






entire intermediate text* each consisting of a single 
when taken In sequence constituted th# actual cipher text. 
Kia digit which served a 3 addendum for the first digit of the 
in terme diate text was prefixed to the cipher text and so 
transmitted to the addressee* 

In deciphering the procesc wau similar; the first 
of the cipher text wan subtracted in modulus 10 from 




the second digit, the second dl^it of the cipher text from 
the third * the third from the fourth, etc. Uiis "avo the 





mediate text which was transformed into plain text in 
usual manner by means of the code book or signal table* 



^0 




is obviously a very simple method' of uti i ng 
the additive process In reenciph^jpiaont and adds very little 



to the security of the Intermediate text* Various other 
methods rftngin^ from the simple to the complex were used by 



the Russians to generate a long additive sequence given quo 
or two 5-digit key groups » The following description la 
typicali Two different $~&lr;Lt key groups arc <;iven which 
we shall call A and B* Then the 1st additive group will be 






of the form 2 times A plus Bj the 2nd is 2 times A plus 2 

the 3rd is 3 times A plus 2 tinea B; the lfth 






s A plus 3 times B| tho 5th Is ij. times A plus 3 tines B, 
so on. It is understood that while this Is the fundamental 
reduction, the actual process of generation consists of sue* 
cc naive additions in the series A and series B using of course 
addition in modulus 10* 

Such systems of cross- add it ion to generate an 
sequence were found by the Germans in the traffic 
of the partisans and bonds and the self -genera tod additive 
ciequence was used for the reencipherment of the small l r *nti 
2-fif*ure code or si^nl table al randy do scribed* Thus it 





was possible to reprr;duoe the cryptographic materials as 
from a inn ironic key* 

The_KfEpfb:'.qk 

n this syiitora the additive sequence is generated 
from Russian plaizi~tuxt, us in* for this purpose seme popular 
novel * When the meVaod is used by Russian agents, the eholc** 
of book probably conforms to the language of the eountry in 
which operations ar<i undertaken* TO tho ten dibits 0 to 9 a3?e 

_ the lettant of the alphabet* The 25 to 30 letters 
depending upon the ^ a &n;*uaqp In which tho key book is written 
are distributed ove:» the ton columns of tho table by no ana of 
a rtinotfOnls key* Thin a substitution table is 
that starting at an agreed point in the book the plain-text 
may be oc averted infc> a digit sequence* This derived digit 

is then used in the usu^l way for the reenciphermeiit 
of xsoss&^.es In the v£.?lou3 code books or signal tables* 









G-ormann wore* able in many cases to trace these 
non-rarjJi-m additive ciequences to the actual key book* 

^Hiitory of Leninism* by Stalin is said to have been 
basis f*sr the ad&lti^a sequences uaed for a time In 19^0 for 






ths reeiicipherment oi a U-fisture HKVD code* 

d* Tra Fi ;pos 1 1 1 one 

According to the Germans transposition o© tho da were 
uso t. by the fusaians to re encipher messages encoded by 
TT?oane of their small signal tables* The following method la 
said to "iave lieen Jtsed by the border guard Trans cauca cms* 
intermediate text Is produced means of Vratem squares 1 * and g > 
a signal tabli similar in structure to the "FT 1 ** This Inter- h* " 

mediate text !u divided into sections containing five 2-dlglt J D 
_ _ Ihese sections the tens of the five dlnomes I g 

are combined Into a Jj-digit group and then tlie units are com- | £ 
biniad into another £- digit group in like manner* A f urther | g 

trails position « s now applied uainr^ this time the ten digits of 
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a section is tl^e unit* The digits of each equal length section 
have been bran posed according to the same pattern and then ^he [ ^ 




sections 'hems lives have been transposed into a new order* | s= 




8* Indicator and Discriminant Groups 

1 P '*i(P 

Aa re.rjarda the ugo of discrliilrmnt -roupa, that 
is, the insertion id. thin the body of the cipher text of a 
group to identify the particular cryptographic system being 
deployed * no mention has been noted in these sources* A 
distinction by means of thi= dl via I on of the cipher text into 
2-d%it* 3- digit, !j.-digit or 5 - diglt groups has been found. 
For Instance traffic based on the PT tables was often u&nt in 2- 
diglt groups whereas that enciphered by means of the Chi ff en- 
codes wac kent In 5-dl«;it group s B 

On the other hand there seems to have been an 
extensive use of indicators to signal the starting points 
on an additive sequence or the choice of a reeneiph&rment* 
In the case of the additive itethods of TOenoipherment, the 
indicators themselves were generally enciphered except when 
the tap* or worse roll was used as has already been mentioned* 
Phe us© of a separate additive tabic to encipher these 
indicators has not been noted, but instead certain groups of 
the cipher text itself have been used* Thus the use of a 
control sroup to indicate the choice of an additive Rroup from 
a table to encipher these indicators has not besn found, but 
the use of a control c^^P to indicate the groups of the 
actual cipher text which /iro tc as used as additive to either 
encipher or decipher tho indicators has been seen* Thus the 
final qroup ABCD of cipher text may indicate such choices. A 
plus B reives tho position of the first j^roup and C minus D the 
position of the second group to be used* Both Indicator groups 
whan deciphered would be identical* one serving as a check on 

the other. The control ^roup would be part of the actual te^t 
whereas the Indicator groups would be Inserted <-*roupa* The 
indlca t or gnup almost always consisted of five digits and was 
found twice in the cipher te^t* once at fcho beginning and once 
at the close* Whether & control mentioned above was used 
on this 5- figure traffic or only on the I4.- figure traffic is 
not clear* The firat three dibits of the five*di*it Indicator 
generally rcave the starting point on the additive sequence auid 
the last two dibits the data on the numbering of the subs tit* 
utionj that Is serial number of Gaaoma table or Bloknot* when 
this was subject to chann*e* '/hero the numbering of the 
substitution itfas dependent on the date, the indicator contained 
the starting point for the additive and the date* When the 
numbering of the substitution reiasined constant 3 then the 
Indicator* which contained the starting point for the additive* 
vufilledeut with the <7roup count for the message* less the 
number of indicator groups* The Indicator at the close of the 
cipher text was identical with that at the beginning, that is* 
when declphereda • 1 

■ 

More rarely two indicators were found at the begin- 
ning of tho cipher text* but this only happened when a five- 
digit indicator was not adequate to impart to the addressao 
the starting point of ths additive and the numbering of the 

substitution* Unenciphered indicators were also noted in other 
positions. For instance* the i^diglfc serial number of the 
31oknot in the second position and the ^-difjifc Indicator (first 
three dlfjlts of this indicating the line and the last two di bits 
the column of the pad) Itt the third position* 

The indicators were often enciphered within an 
individual circuit by the cipher text standing at a specified 
position (addition was more usual than subtraction)*" This 
was done with both indicators* that is at the be running and at 
tho end of tie cipher text* If for example the indicator at 



the beginning had been enciphered with, the fifth five 
di^it group of the cipher text by addition, then corro 




ingly the Indicator at the end was enciphered by addition of 
fifth group from the end# 




9 • Machine Mo 




a* The Telet 




According to the TICOK sources, traffic between 
Iioseow and the high staiTa at the front was sent by ireans 
of a Russian Baudot teletype scrambler. It secma that In l/V 



a subsection of the Si'rnal Intelligence Agency of the Amy 
Hi?*h Command {OKJj/GdNAj which was engaged in security studies 
and mathematical cryptanalysisp collaborated with the experts 
from the Forschungsamt (Goerin^a "He sear eh Bureau 1 * ) in the 

ical solution of this traffic* The Forsclumssarafc seems 
to get the credit for reading this traffic, since VTllheln 

* the former chief of cryptanalysia of the Signal Intelll 

r^cnee Agency ot the 3 up re me Comraand German Armed Forces 
□KW/Chi) said In 'interrogation that, " " ~ 









appears to havo boon more successful than prejudiced opinion 
readily admits"* 

The For schung saint in 19if3 succeeded in rwoimtvuet 
ft a cipher machine on whi^h this traffic was based* The 
break- In was due to a peculiarity of the machine cons is tin/; 
in the* fact that currently compromises seven character a in 
length were produced* In each transmission pause eeven 
characters of pure key are transmitted m torn tic ally before 

the cipher mechanism is switched off ■ If no text is sent 
within these seven characters the first plain letter starts 

cipher device operating af;aln* The deciphered text 

yielded a plain $*fi£ure code* 

i 

b q The A' 





Space does not permit (the aoureea in any ca-^e are 
none too adequate) that details of the Russian cipher machine , 




K-37* be friven in this paper* Suffice 1^ to say that no 
Tic was ever obaorvsd by the Germans up to the day of 
capitulation as boln# enciphered by means of the machine. 
The Geraoan* did capture a spec i man of the K-37 in 19^1 and It 
wan known by them that it was intended for the onciphermant 
of traffic from Army Corps upward* The machine ic of the type 
known as the "Large Ravelin" • That is, it was probably built 
fron the Bagel in patent and correspond- d to the French" B-*211 
with certain changes* It was so well built throughout and the 
construction of such inechanically clean work that the Germans 



were of the opinion that the device could not bo of Russian 
manufacture. One vital part was mi a sins froii the captured 

of this machine* Research on it was done by OKH f 111 7/ 
FI, Doubtless Dr* Erich lluettonhain of QKW/chi who io report 





as being one of the best of the German crypt analysts in the 
mathematical field also took a look at it. Anyway Fritz Menzer 
also an expert in the dev&lopment arid testing of cipher machines 
with OKJ/Chi is said to have tried to reconstruct this one vital 
part and to make the machine actually work* but without success* 
Ihe lermans ^sre 








opinion that from the 
y the Russian K-37 was 
conditionally sufficient* Of course the same may be said 



of view of e 






any 
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Rawing that crib* are a¥dilabla* It becomes merely a 

loading or over-loading of the vehicle 






with traffic. With the one-time uae of additive there 
is no question of overloading but a problem of sufficient 
production and distribution* 



Transposition Systems 






are gaid to have been 
employed in the radio traffic of Russian band*. The bos 
widths were constant, that is for a given link, but the 
width of the A box was not n<3cessarily the sane as the 
width of the B box* The key words chunked daily, but did 
recur from month to month. The Russian text was written 



in Latin letters by moans of a transliteration. Punctuation 






were enciphered, for example, the pa riod no TCK, 
comma as SPT, etc. The address was always at the berUnnlnft 
and the signature at the end* If a message had several 

B B "PROD SLED' 1 or KOJJEC SLED" was pUeod at the end ojf 
the parts, PRODOLVEJJIE (PROD) 11 or "KONEG" at the be^innine* 
Apparently there were no uppar or lower limit a to the message 
lengths* The numerical key for each box is derived frojii a 
key sentence* As many letters art* counted off in 






sentence as the tactical date of the message indicates* 
Beginning with the last of these letters a number of letters 

en which corresponds to the width of the box* If the 
sentenoe is not long enough* the aerie a continues froir. the 
beginning. The key is determined in the usual f asi io n free 
the ^roup of letters thus selected by numbering the letters 
according to their alphabetical sequence* When the a a ma 
letter recurs, the oj™ at the left receives the lowAr number* 
Both the ke ya thna obtained, one for the A box and one for 




B box, are almost always raad cyclically from a definite 

number on (1 to 7) • In the enciphered Brassage a blind or 

rrpoup is inserted, its position bein<5 usually determined 
by the first number of the key, sporadically by Che date 




(without using the tons, 0 equals 10th position). Encipher- 
inent ia accomplished in the usual manner by writing the plain 
text horizontally In the rowu of box A, taking the columns of 



this box in the niraerical order aft indicated by the key and 
writing the letters in the rows of the B bo^: ind finally 
taking the letters of these columns out in tho order indicated 
by this numerical key to produce the cipher text* 

C* Some Bote a _ on Cryptographic Procedure 



The folic wing notes on cryptographic procedure are 
from the 1939 edition of "Reflations, for Staff Crypto^ra^hiq 
Service in the Red Army 11 (DF~ Jt 




(1) It is catfUsorically forbidden to encipher in the sane 




an order regarding the abolition of said code* If 
no other incana are available the order must b4 trans- 
mitted through i;he cryptographic unit of the Peoples 
Commissariat for Internal Affaire. 

(2) The sending of packages of cryptographic Material is 




the field connection* of tho NKVD and the pouches 
ar^ Inscribed: "strictly Secret: Series sf K n * ?to tbe 



Chief of the Staff Cryptographic Unit of the troop 
unit *• ,* •personally"* 
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) The recipient of cryptographic materials conf tma to 

the sender on the day of receipt by an open telegram 
of Scries "G" by military telegraph (if ava Liable): 
"Your number*** *ulth enclosure received in rpod order, 
(day and month) w , or by a report via the field connection 

The deai^mifciona 11 Series G n and "Series K w seem to be 
priority r^tin^s since in this document there Is found 
also the references: 

(a) Operational documsnts (battle orders and 
reports) are staraod with the imprint 
text of series "G " urgent 11 * Cipher text 
s or i Ci G* are wo? 









(b) Cipher texts with collective data* e.g. of 
personnel, equipment, custody of material, 

etc*, for a district or army are to be sont 

e tamped, " cipher teat, so r lo 3 J^li" 



I (c) Cipher texts (aside from series* "G* and "K") 

I addressed to the Central Coiraaittee of the 

I Communist Party to the Council of the Peoples 

Commissars of the U.S*S*R*, to the Peoples 
Commissar for the Defense of the U*S.3*R*, 




to the Chief of General Staff of the Red Army, 
of the ,/ar Council, and of the Staff of the 
military District are stamped "Cipher text "a"" 



(d) All other messages are stamped "cipher text** 



(5) Enclpherment of punctuation mrks in cipher text la 

obligatory. However the period at the end of the 

cipher text is not enciphered* 

(6) Address, date, month, year and words like troop unit, 



nap coordinates and cover slfjjriature stand out from 

general message text and constitute t 






The **data" are enciphered in the midst of the message 
text* To set thais off from the mssea^e text they are 
preceded by "data" and followed by "end of data"* 

■ 

(7) Proper names and especially Important data (places, 

numbers, time, etc* j where garbling Is especially 
dangerous , must be repeated in the enciphermefrt* 

(8) Especially lonr; messages are to be broken up into 

separate parts (150*200 groups in each part), which 









■ira to b-i oncipii.rod uad Pint Intf opende fitly. 'Mien s > 



breaking up a m^gsa^e into several parts the 
are incorporated in the first part of the message* 

At the end of the first and ensuing parts la added I ^ £ 

enciphered •continuation fallows " , in the next to the J f 

last part "conclusion follows 11 » Furthermore at the | * 
beginning of the following parts there is ins or ted 

enciphered ''first continuation of 0essar;o number*****, |u 

"second continuation of message number** etc* and I ^ 

in the fin&ju part w end of ^essa^e number***.** c**k \ F? 



part of such a message must have the appearance of a J "~ 

complete cipher text and must be regis t sred under 

, individual number* 



r 



NEVER tq b E SEEN BY UNAUTHORIZED PERSONS. 



■ 



(9) If parts of a meaaasa be then a request ia 

j enciphered, fjor tho garbled passages {from 




ft 



such and ouch a word to such aid such a word) eig»i 

No. — * from the word (frraufr) "Char troops" to 
the wGtd "the enemy ia In possession of 1f » 




(10) Th* repetition of single .^oiapfa or of the entire me&ea 

la requested in clear 









, e*r> Your message fJo« **- repeat 

H 




In these re filiation* the activities of tho staff 
Units In tliae of war werb outlined also with 
final atreaa bein^ placed on fcha li*ipo*tsnee of capttoted 
eneiay jiiaterial# 

Para XkQ* "The pro tap t utilization of 

material of 





enemy la of great taportanee for 
of our operations* Therefore, if our . 
aieana of enelphermenta! coranRnder codec, traffic 
te^ts and other similar documents of the enemy y 
must be done to paas the captured material as 
possible to the intelligence agencies 11 * 






mic c e 
codes 3 
codes t 





or 




VI, THK AHB AS AMD PATHS OP PSK OF THE BASIC SYSTKM5 

jn the Red Worker and Peasant Army 

(1) Tha 5-figure chiffra codas ware usad by fcha 
Staff, Front Staff, Array, Corps, Division and 

Brigada* 

(a) Oil- A was in use from Jan. 1*1 to Oct. 1*1 • 

i 

(b) 023= A was in ft" 0 * 0ot * H ^° 3iw<* 
(©) Qk$±k waa in uaa from March if 2 to March J+-3 





4 



i 



(d) 062- A waa in uaa from March 10 to March 

(e) 091- A waa in us© from March 1^ to May 



(£) Tha figure eoda "books war© u 
Division p Brigad© end Ragimant 



Army 



(a) was usad from Juna 39 to J™* M 5 * 





-6 was used from June ^0 to Sept, kl fr 



(cl OKK-7 was uaad fron Sept. 1^1 to Jan, k-2 
(d) QKK*-8 waa uaad from Jan, 1|2 to March 




(a) OSKK-7 was usad from Aug* *A to March i|2 



(3) Various 2 f 3 end L^figura systems known as SUV 
war© usod by Army*. Corps , Division, Br i gad©, 
RoRlmant. Battalion and Company frcm 191*2 to 19k5a 






B» In tha Feoplea Commissariat for In Carnal Affair a 




(1) A S-figura coda book ¥=as uaad by tha GUP HKVD, 
Front Strff, Division* tftllt, and Regiment "" 

to 






(2) Various I*.*- figure ccda books we usad by tha GUP 




, Front Staff, Division, ttolt and Hog 
from 1935 to 19k$* 

(a) ZJEfiWG was uaad from 

(b) VI ZA was usad from 19^3 to 1 








Various 2*figur© systems known aa FT were usad 
by Regiment, Battalion, Company and Platoon from 

1933 to 19l*2 i 

(3) Various >-flgure coda books or tables ware usad 
by th© Army Air POrca, The VAK-38 in force 



> 

E? 

(c) NXVA was uasd from Feb. I|5 to May 45 0 j * 

(3) Various 2,3 and ^figure systems similar in *> 



structure to SUV wero uaad by Division, Unit ff -1 
Regiment, Batalllon, Plaid Poat, Operational j 
Group and Guard Group from 19^2 to 19^5* " 
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Various 2-flgure systems similar in structure 
to FT tables war© used by Regiment* B&t&llion, 
eld Post, Operational Group and Guard Group 
from 1933 to l<?k2, 




CD > 



> 
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